Lucene search
GoogleOSV:CVE-2021-39236HistoryNov 19, 2021 - 10:15 a.m.
CVE-2021-39236
2021-11-1910:15:08
Google
osv.dev
5
apache ozone
vulnerability
user impersonation
authenticated users
om requests
software security
In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.
Related
veracode
veracode
User Impersonation
2021-11-22 16:51:25
github
github
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
2021-11-23 17:56:45
nvd
nvd
CVE-2021-39236
2021-11-19 10:15:08
osv
osv
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
2021-11-23 17:56:45
cnvd
cnvd
Apache Ozone Licensing Issue Vulnerability (CNVD-2021-91629)
2021-11-24 00:00:00
cvelist
cvelist
CVE-2021-39236 Owners of the S3 tokens are not validated
2021-11-19 09:20:25
prion
prion
Code injection
2021-11-19 10:15:00
cve
cve
CVE-2021-39236
2021-11-19 10:15:08