Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101701
HistoryDec 19, 2021 - 12:00 a.m.

Atomix Information Disclosure Vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
atomix
java 8
information disclosure
vulnerability
distributed coordination
onos nodes
sensitive information

EPSS

0.001

Percentile

28.4%

Atomix is a fault-tolerant distributed coordination framework for JAVA 8. Atomix version 3.1.5 is vulnerable to an information disclosure vulnerability. An attacker could exploit this vulnerability to access sensitive information when a malicious Atomix node queries the distributed variable primitives, which contain the entire list of primitives used by ONOS nodes to share important state.

EPSS

0.001

Percentile

28.4%