Lucene search

K
osvGoogleOSV:CVE-2021-41532
HistoryNov 19, 2021 - 10:15 a.m.

CVE-2021-41532

2021-11-1910:15:08
Google
osv.dev
2

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

CPENameOperatorVersion
ozoneeqozone-1.2.0-RC0

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%