Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-35451

Oozie local privilege escalation

Description

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Oozie

  • unspecified to < 5.2.1affected

References