GitHub Advisoryadvisory · Maven

GHSA-4jhc-wjr3-pwh2 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

HIGH Published 2021-12-17 Modified 2022-01-04 Official page ↗
Aliases
CVE-2020-35211
Ecosystem
Maven
Packages
io.atomix:atomix
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Reviewed
2021-12-17

Affected packages

• Maven io.atomix:atomix: <= 3.1.5 (no fix yet)

Description

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Related

Alias · CVE (1)

  • CVE-2020-35211 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable… vulnerability

References