Lucene search
GoogleOSV:GHSA-C6J7-4FR9-C76PHistoryNov 23, 2021 - 6:17 p.m.
Incorrect permissions in Apache Ozone
2021-11-2318:17:41
Google
osv.dev
18
0.001 Low
EPSS
Percentile
34.3%
In Apache Ozone before 1.2.0, Ozone Datanode doesn’t check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
Related
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
veracode
veracode
Privilege Escalation
2021-11-22 10:38:49
cve
cve
CVE-2021-39235
2021-11-19 10:15:08
prion
prion
Code injection
2021-11-19 10:15:00
osv
osv
CVE-2021-39235
2021-11-19 10:15:08
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08