Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91280
HistoryNov 24, 2021 - 12:00 a.m.

Apache Ozone input validation error vulnerability

2021-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

34.3%

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments, an input validation error vulnerability exists in Apache Ozone, which stems from the product’s Ozone Datanode not checking the block token’s access mode parameter. An attacker could use a token with READ privileges to perform a write operation through this vulnerability.

CPENameOperatorVersion
apache apache ozonelt1.2.0

0.001 Low

EPSS

Percentile

34.3%