Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2, and 7.11.x before 7.11.2-23.0 can leak user information across thread contexts. This occurs in opportunistic circumstances when there is concurrent query execution by a low-privilege user and a high-privilege user. The former query might run with the latter query's privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-04-13T05:52:46
Updated: 2024-08-03T21:55:12.154Z
Reserved: 2021-03-19T00:00:00
Link: CVE-2021-28938
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-04-13T06:15:12.420
Modified: 2024-11-21T06:00:25.023
Link: CVE-2021-28938
Redhat
No data.