Lucene search
GoogleOSV:GHSA-C6J7-4FR9-C76PHistoryNov 23, 2021 - 6:17 p.m.
Incorrect permissions in Apache Ozone
2021-11-2318:17:41
Google
osv.dev
20
apache ozone
permissions
vulnerability
access mode
datanode
EPSS
0.001
Percentile
34.2%
In Apache Ozone before 1.2.0, Ozone Datanode doesn’t check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
Related
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
veracode
veracode
Privilege Escalation
2021-11-22 10:38:49
prion
prion
Code injection
2021-11-19 10:15:00
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
osv
osv
CVE-2021-39235
2021-11-19 10:15:08
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08
cve
cve
CVE-2021-39235
2021-11-19 10:15:08