Lucene search
GoogleOSV:GHSA-86FH-J58M-7PF5HistoryNov 23, 2021 - 5:57 p.m.
Improper Privilege Management in Apache Ozone
2021-11-2317:57:14
Google
osv.dev
13
0.002 Low
EPSS
Percentile
58.7%
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.
Related
cnvd
cnvd
Apache Ozone has an unspecified vulnerability (CNVD-2021-91624)
2021-11-24 00:00:00
cve
cve
CVE-2021-36372
2021-11-19 10:15:07
veracode
veracode
Privilege Escalation
2021-11-22 04:54:00
osv
osv
CVE-2021-36372
2021-11-19 10:15:07
prion
prion
Design/Logic Flaw
2021-11-19 10:15:00
cvelist
cvelist
CVE-2021-36372 Original block tokens are persisted and can be retrieved
2021-11-19 09:20:16
nvd
nvd
CVE-2021-36372
2021-11-19 10:15:07
github
github
Improper Privilege Management in Apache Ozone
2021-11-23 17:57:14