Lucene search
GoogleOSV:CVE-2021-39235HistoryNov 19, 2021 - 10:15 a.m.
CVE-2021-39235
2021-11-1910:15:08
Google
osv.dev
3
In Apache Ozone before 1.2.0, Ozone Datanode doesn’t check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ozone | eq | ozone-1.2.0-RC0 |
Related
osv
osv
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
cve
cve
CVE-2021-39235
2021-11-19 10:15:08
prion
prion
Code injection
2021-11-19 10:15:00
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08
veracode
veracode
Privilege Escalation
2021-11-22 10:38:49