Lucene search
GoogleOSV:GHSA-GC37-9G7F-96FXHistoryNov 23, 2021 - 6:17 p.m.
Apache Ozone exposes OM, SCM and Datanode metadata
2021-11-2318:17:50
Google
osv.dev
23
apache ozone
metadata
recon http
unauthenticated access
EPSS
0.001
Percentile
24.7%
In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.
Related
veracode
veracode
Information Disclosure
2021-11-23 14:30:31
cvelist
cvelist
CVE-2021-41532 Unauthenticated access to Ozone Recon HTTP endpoints
2021-11-19 09:20:26
github
github
Apache Ozone exposes OM, SCM and Datanode metadata
2021-11-23 18:17:50
prion
prion
Code injection
2021-11-19 10:15:00
osv
osv
CVE-2021-41532
2021-11-19 10:15:08
nvd
nvd
CVE-2021-41532
2021-11-19 10:15:08
cnvd
cnvd
Apache Ozone Access Control Error Vulnerability
2021-11-24 00:00:00
cve
cve
CVE-2021-41532
2021-11-19 10:15:08