Threats tagged 'ghsa-xqj2-5wmj-m7c5'

In Pig version 3.8.2 and earlier, the Token Management function's query interface lacks proper permission verification. This flaw allows any authenticated user to retrieve plaintext authentication tokens of all logged-in users, including administrators. Exploiting this vulnerability enables an attacker to impersonate an administrator, gain management permissions, and take over the system.