GitHub Advisoryadvisory · Maven

GHSA-33xh-xch9-p6hj Incorrect Authorization in Apache Ozone

CRITICAL Published 2021-11-23 Modified 2021-11-22 Official page ↗
Aliases
CVE-2021-39233
Ecosystem
Maven
Packages
org.apache.ozone:ozone-main
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-863
Reviewed
2021-11-22

Affected packages

• Maven org.apache.ozone:ozone-main: < 1.2.0 → fixed in 1.2.0

Description

In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.

Related

Alias · CVE (1)

  • CVE-2021-39233 In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References