Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-39233

Container-related datanode operations can be called without authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Ozone

  • 1.1 to ≤ 1.1affected

References