Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91281
HistoryNov 24, 2021 - 12:00 a.m.

Apache Ozone Access Control Error Vulnerability

2021-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
apache ozone
access control
vulnerability
permissions
metadata
sensitive data

EPSS

0.001

Percentile

24.7%

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments, an access control error vulnerability exists in Apache Ozone that stems from the product not adding valid permissions for access to OM, SCM and Datanode metadata. An attacker could access sensitive data through this vulnerability.

EPSS

0.001

Percentile

24.7%