CVE-2020-35451 Oozie local privilege escalation

2021-03-0915:20:13

CWE-377

apache

www.cve.org

oozie

sharelib

race condition

file replacement

AI Score

4.7

Confidence

High

EPSS

Percentile

9.8%

JSON

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie’s sharelib during it’s creation.

CNA Affected

[
  {
    "product": "Apache Oozie",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "5.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]