Improper Input Validation in Apache Thrift
High severity
GitHub Reviewed
Published
Jan 17, 2019
to the GitHub Advisory Database
•
Updated Mar 4, 2024
Package
Affected versions
>= 0.5.0, < 0.9.3-1
>= 0.10.0, < 0.12.0
Patched versions
0.9.3-1
0.12.0
Description
Published by the National Vulnerability Database
Jan 7, 2019
Published to the GitHub Advisory Database
Jan 17, 2019
Reviewed
Jun 16, 2020
Last updated
Mar 4, 2024
Credits
-
szymon-miezal Analyst
-
MarkLee131 Analyst
Apache Thrift Java client library versions 0.5.0 prior to 0.9.3-1 and 0.10.0 prior to 0.12.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
References