{"metadata": {"vulnerability": "CVE-2023-29055", "count": 21, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2023-03-30T12:23:45.144Z", "date_only": false, "value": "2023-03-30T12:23:45.144Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-29055", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:56.632Z", "date_only": false, "value": "2023-12-13T01:20:56.632176Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-29055", "record": "GSD-2023-29055", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-29T12:20:55.147Z", "date_only": false, "value": "2024-01-29T12:20:55.147Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29055", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-29T12:25:05.366Z", "date_only": false, "value": "2024-01-29T12:25:05.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2023-29055", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-29T13:15:07Z", "date_only": false, "value": "2024-01-29T13:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3VVC-V8C2-43R7", "record": "GHSA-3VVC-V8C2-43R7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-29T13:15:07.970Z", "date_only": false, "value": "2024-01-29T13:15:07.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29055", "record": "FKIE_CVE-2023-29055", "field": "published"}, {"timestamp": "2024-01-29T13:15:07.970Z", "date_only": false, "value": "2024-01-29T13:15:07.970", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-29055", "record": "GSD-2023-29055", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-29T14:31:24Z", "date_only": false, "value": "2024-01-29T14:31:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/175255", "record": "CVE-2023-29055", "field": "creation_timestamp", "uuid": "04458b1c-263b-4fbd-ac50-94ddb95f0743", "content": "https://ift.tt/r8S3g9l\nCVE-2023-29055", "url": "https://t.me/ctinow/175255"}, {"timestamp": "2024-01-29T15:30:25Z", "date_only": false, "value": "2024-01-29T15:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3VVC-V8C2-43R7", "record": "GHSA-3VVC-V8C2-43R7", "field": "published"}, {"timestamp": "2024-01-30T00:00:00Z", "date_only": true, "value": "2024-01-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-22238", "record": "CNVD-2024-22238", "field": "submitTime"}, {"timestamp": "2024-02-02T02:06:07.107Z", "date_only": false, "value": "2024-02-02T02:06:07.107", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-29055", "record": "GSD-2023-29055", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-02T17:14:27.898Z", "date_only": false, "value": "2024-02-02T17:14:27.898687Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29055", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-02-02T17:14:27.898Z", "date_only": false, "value": "2024-02-02T17:14:27.898687Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29055", "record": "FKIE_CVE-2023-29055", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-02-21T14:41:51Z", "date_only": false, "value": "2024-02-21T14:41:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/189634", "record": "CVE-2023-29055", "field": "creation_timestamp", "uuid": "9ffd8d45-d95c-4193-8e47-05021dbaf0ca", "content": "https://ift.tt/Odsavyp\nCVE-2023-29055 | Apache Kylin up to 4.0.3 Server Config Web Interface kylin.properties cleartext transmission", "url": "https://t.me/ctinow/189634"}, {"timestamp": "2024-05-13T00:00:00Z", "date_only": true, "value": "2024-05-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-22238", "record": "CNVD-2024-22238", "field": "openTime"}, {"timestamp": "2024-08-02T14:00:14.579Z", "date_only": false, "value": "2024-08-02T14:00:14.579Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-29055", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:33:17Z", "date_only": false, "value": "2025-02-13T19:33:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3VVC-V8C2-43R7", "record": "GHSA-3VVC-V8C2-43R7", "field": "modified"}, {"timestamp": "2025-02-13T20:12:59Z", "date_only": false, "value": "2025-02-13T20:12:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4334", "record": "CVE-2023-29055", "field": "creation_timestamp", "uuid": "a0e5cf9f-1636-4f0b-8904-48ea2bbd492a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29055\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP (or other plain text protocol), it is possible for network sniffers to hijack the HTTP payload and get access to the content of kylin.properties and potentially the containing credentials.\n\nTo avoid this threat, users are recommended to\u00a0\n\n  *  Always turn on HTTPS so that network payload is encrypted.\n\n  *  Avoid putting credentials in kylin.properties, or at least not in plain text.\n  *  Use network firewalls to protect the serverside such that it is not accessible to external attackers.\n\n  *  Upgrade to version Apache Kylin 4.0.4, which filters out the sensitive content that goes to the Server Config web interface.\n\ud83d\udccf Published: 2024-01-29T15:30:25Z\n\ud83d\udccf Modified: 2025-02-13T19:33:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-29055\n2. https://github.com/apache/kylin/commit/b60d5ae694dffc2281bfe0ef464eada0b3a9b774\n3. https://github.com/apache/kylin\n4. https://lists.apache.org/thread/o1bvyv9wnfkx7dxpfjlor20nykgsoh6r\n5. http://www.openwall.com/lists/oss-security/2024/01/29/1", "url": "https://t.me/DarkWebInformer_CVEAlerts/4334"}, {"timestamp": "2025-06-20T19:41:27.944Z", "date_only": false, "value": "2025-06-20T19:41:27.944Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-29055", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-20T19:41:27.944Z", "date_only": false, "value": "2025-06-20T19:41:27.944Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29055", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:49:16.137Z", "date_only": false, "value": "2026-06-17T05:49:16.137", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29055", "record": "FKIE_CVE-2023-29055", "field": "lastModified"}]}