IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-24 12:17

MODIFIED

2026-04-24 12:17

EPSS (Prob. Exploit)

0.45%

Top 62.1%

DATA SOURCES:

NVD 🔗 2026-04-24 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the platform during workflow execution. This issue affects Apache DolphinScheduler versions prior to 3.4.1. Users are recommended to upgrade to version 3.4.1, which fixes this issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-863

> CWE DETAILED DESCRIPTIONS

CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

> HISTORIQUE DES MODIFICATIONS

Première apparition

24/04/2026 12:17

Source: NVD

📊 ENRICHISSEMENT 01/05/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Total des modifications: 1 Dernière mise à jour: 6 months ago

> REFERENCES

https://lists.apache.org/thread/hy4ntb2gys8150zfmnxhsd5ph0hoh7s9

http://www.openwall.com/lists/oss-security/2026/04/24/1