Apache Ozone Licensing Issue Vulnerability (CNVD-2021-91629)

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments, an authorization issue vulnerability exists in Apache Ozone, which stems from the product’s failure to protect OM requests with valid privileges. An attacker could create a specific OM request to emulate another user with valid Ozone S3 credentials.