Privilege Escalation

2021-11-2213:48:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

privilege escalation

apache hadoop

access control lists

EPSS

0.001

Percentile

17.2%

JSON

org.apache.hadoop:hadoop-ozone-common is vulnerable to privilege escalation. An authenticated attacker is able to gain privileges to access other user blocks via a specifically crafted request when the attacker knows the ID of the existing user block, bypassing other security checks like access control lists.