CVE-2020-17533— Apache Accumulo Improper Handling of Insufficient Permissions
Quick assessment
Affected
Apache Software Foundation Apache Accumulo
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Accumulo是Apache基金会的一个可靠的、可伸缩的、高性能的排序分布式的 Key-Value 存储应用。 Apache Accumulo 1.5.0版本至1.10.0版本，2.0.0版本存在安全漏洞，该漏洞源于经过身份验证的用户执行某些管理操作之前，没有正确地检查一些策略实施函数的返回值。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-17533
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Accumulo Improper Handling of Insufficient Permissions
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and 'canPerformSystemActions' security functions are not checked in some instances, therefore allowing an authenticated user with insufficient permissions to perform the following actions: flushing a table, shutting down Accumulo or an individual tablet server, and setting or removing system-wide Accumulo configuration properties.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
未加检查的返回值
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Accumulo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Accumulo是Apache基金会的一个可靠的、可伸缩的、高性能的排序分布式的 Key-Value 存储应用。 Apache Accumulo 1.5.0版本至1.10.0版本，2.0.0版本存在安全漏洞，该漏洞源于经过身份验证的用户执行某些管理操作之前，没有正确地检查一些策略实施函数的返回值。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Accumulo | Apache Accumulo 2.0.0 | - |
|
II. Public POCs for CVE-2020-17533
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/pazeray/CVE-2020-17533 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-17533
请登录查看更多情报信息。
Mailing List Discussions for CVE-2020-17533 (3)
-
-
https://lists.apache.org/thread.html/rf8c1a787b6951d3dacb9ec58f0bf1633790c91f54ff10c6f8ff9d8ed%40%3Cannounce.apache.org%3E mailing-list x_refsource_MLIST
IV. Related Vulnerabilities
Same vendor: Apache Software Foundation
-
CVE-2026-63041
Apache APISIX: attach-consumer-label does not strip client-s -
CVE-2026-73180
Apache Tomcat: Authenticated WebSocket session survives end -
CVE-2026-68763
Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tra -
CVE-2026-68569
Apache Tomcat: Principal lookup can fail open in some cases -
CVE-2026-68525
Apache Tomcat: Redirect after FORM auth may bypass method sp
V. Comments for CVE-2020-17533
No comments yet