CVE record · 1 source
CVE-2026-124495
When workers run as the topology owner, the Logviewer serves files that a worker has placed in its own log directory as links to other files.
- Vendor
- Apache Software Foundation
- Product
- Apache Storm
- Weakness
- CWE-59
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When workers run as the topology owner, the Logviewer serves files that a worker has placed in its own log directory as links to other files.
When workers run as the topology owner, the Logviewer serves files that a worker has placed in its own log directory as links to other files. A user who is allowed to submit topologies can read the worker logs of other users'…