Hackers Exploit 3-Year-Old Apache Flink Vulnerability: CISA Issues Urgent Patch Deadline
The US Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a three-year-old Apache Flink vulnerability. Federal agencies must patch or abandon the software by June 13, while private firms should also take heed to ensure their endpoint protection is up to date.
Hot Take:
Well, it looks like CISA has a new favorite oldie! Dusting off a three-year-old Apache Flink vulnerability sounds like a plot twist in a cybersecurity soap opera. Let’s just hope federal agencies don’t wait for the reruns to patch their systems!
Key Points:
- CISA adds a three-year-old Apache Flink vulnerability to its KEV catalog.
- The flaw, CVE-2020-17519, allows attackers to read any file on the local filesystem via the JobManager REST interface.
- Patching deadline for federal agencies set to June 13.
- Vulnerable versions include Flink 1.11.0, 1.11.1, and 1.11.2.
- No additional details shared about the vulnerability’s exploiters or victims.
Already a member? Log in here