Lucene search
GoogleOSV:CVE-2021-36372HistoryNov 19, 2021 - 10:15 a.m.
CVE-2021-36372
2021-11-1910:15:07
Google
osv.dev
2
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ozone | eq | ozone-1.2.0-RC0 |
Related
cnvd
cnvd
Apache Ozone has an unspecified vulnerability (CNVD-2021-91624)
2021-11-24 00:00:00
osv
osv
Improper Privilege Management in Apache Ozone
2021-11-23 17:57:14
cve
cve
CVE-2021-36372
2021-11-19 10:15:07
veracode
veracode
Privilege Escalation
2021-11-22 04:54:00
prion
prion
Design/Logic Flaw
2021-11-19 10:15:00
cvelist
cvelist
CVE-2021-36372 Original block tokens are persisted and can be retrieved
2021-11-19 09:20:16
nvd
nvd
CVE-2021-36372
2021-11-19 10:15:07
github
github
Improper Privilege Management in Apache Ozone
2021-11-23 17:57:14