In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NApache Ozone
APPApache< 1.2.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Container
Powiązane podatności
CVE-2021-36372CRITICAL9.8ten sam produkt
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata databa...
CVE-2021-39231CRITICAL9.1ten sam produkt
In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for con...
CVE-2024-45106HIGH8.1ten sam produkt
Improper authentication of an HTTP endpoint in the S3 Gateway of Apache Ozone 1.4.0 allows any authenticated K...
CVE-2021-39236HIGH8.8ten sam produkt
In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM reque...
CVE-2021-39232HIGH8.8ten sam produkt
In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticat...