CyberRota Analysis
AI-GeneratedStarRocks versions up to 4.0.13 are vulnerable to an authentication bypass that allows attackers to access six unauthenticated endpoints, exposing sensitive information such as cluster topology, database metadata, JVM statistics, and version details. This vulnerability could lead to unauthorized information disclosure, potentially aiding further attacks on the system. Organizations using affected versions should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.