CVE-2025-59790
BaseFortify
Publication date: 2025-11-28
Last updated on: 2025-12-04
Assigner: Apache Software Foundation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apache | kvrocks | From 2.9.0 (inc) to 2.14.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-269 | The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Privilege Management issue in Apache Kvrocks versions 2.9.0 through 2.13.0. It means that the software does not correctly manage user privileges, potentially allowing unauthorized actions or access.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing unauthorized users to perform actions or access data they should not be able to, due to improper management of privileges within Apache Kvrocks.
What immediate steps should I take to mitigate this vulnerability?
Users are recommended to upgrade Apache Kvrocks to version 2.14.0, which fixes the improper privilege management vulnerability.