Lucene search
Veracode Vulnerability DatabaseVERACODE:33049HistoryNov 22, 2021 - 10:38 a.m.
Privilege Escalation
2021-11-2210:38:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
hadoop-ozone-ozone-manager
privilege escalation
vulnerability
access mode
block token
write operations
EPSS
0.001
Percentile
34.2%
hadoop-ozone-ozone-manager is vulnerable to privilege escalation. The library does not check the access mode parameter of the block token, allowing an attacker with a read block token to do write operations.
Related
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
osv
osv
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
CVE-2021-39235
2021-11-19 10:15:08
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
prion
prion
Code injection
2021-11-19 10:15:00
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08
cve
cve
CVE-2021-39235
2021-11-19 10:15:08