Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-39234

Raw block data can be read bypassing ACL/authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific request allowing access those blocks, bypassing other security checks like ACL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Ozone

  • 1.1 to ≤ 1.1affected

References