Lucene search
China National Vulnerability DatabaseCNVD-2021-91628HistoryNov 24, 2021 - 12:00 a.m.
Apache Ozone Access Control Error Vulnerability (CNVD-2021-91628)
2021-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
apache ozone
access control
error
vulnerability
permission checks
acl
sensitive information
cnvd-2021-91628
EPSS
0.001
Percentile
17.2%
Apache Ozone is an application. An accessible control error vulnerability exists in Apache Ozone, which stems from the product’s failure to add valid permission checks for users. An attacker could bypass ACL checks to access sensitive information through this vulnerability.
Related
github
github
Incorrect Authorization in Apache Ozone
2021-11-23 17:56:30
osv
osv
CVE-2021-39234
2021-11-19 10:15:08
Incorrect Authorization in Apache Ozone
2021-11-23 17:56:30
nvd
nvd
CVE-2021-39234
2021-11-19 10:15:08
cve
cve
CVE-2021-39234
2021-11-19 10:15:08
veracode
veracode
Privilege Escalation
2021-11-22 13:48:31
cvelist
cvelist
CVE-2021-39234 Raw block data can be read bypassing ACL/authorization
2021-11-19 09:20:22
prion
prion
Design/Logic Flaw
2021-11-19 10:15:00