Lucene search

K
osvGoogleOSV:CVE-2021-39231
HistoryNov 19, 2021 - 10:15 a.m.

CVE-2021-39231

2021-11-1910:15:08
Google
osv.dev
3

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

CPENameOperatorVersion
ozoneeqozone-1.2.0-RC0

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%