Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

According to its banner, the version of Apache Kylin running on the remote host is 2.3.x < 3.1.0. It is, therefore, affected by a Command Injection vulnerability through the REST API.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os
    command with the user input string, a user is likely to be able to execute any os command without any
    protection or validation. (CVE-2020-1956)

The instance of Apache Kylin running on the remote host is 2.3.x prior to 2.3.3, 2.4.x prior to 2.4.2, 2.5.x prior to 2.5.3, 2.6.x prior to 2.6.6 or 3.x prior to 3.0.2. Therefore, it is affected by a command injection vulnerability due to some restful APIs concatenating OS commands with user input strings. An authenticated, remote attacker with the MANAGEMENT or ADMIN permissions on any project can inject arbitrary system commands during Cube migration via the Kylin web interface.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
114984	Apache Kylin 2.3.x < 3.1.0 Command Injection	Web App Scanning	Component Vulnerability	high
415241	SCA: security update for org.apache.kylin:kylin-core-common (GHSA-gprm-xqrc-c2j3)	Tenable Cloud Security	SCA Checks	high
415241	SCA: security update for org.apache.kylin:kylin-core-common (GHSA-gprm-xqrc-c2j3)	Tenable Self-Hosted Container Security	SCA Checks	high
186352	Apache Kylin 2.3.x < 2.3.3 / 2.4.x < 2.4.2 / 2.5.x < 2.5.3 / 2.6.x < 2.6.6 / 3.x < 3.0.2 Command Injection (CVE-2020-1956)	Nessus	CGI abuses	high

Detections

Analytics

CVE-2020-1956

high

Tenable Plugins

high

high

high

high