Lucene search
PRIOn knowledge basePRION:CVE-2021-39235HistoryNov 19, 2021 - 10:15 a.m.
Code injection
2021-11-1910:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
34.3%
In Apache Ozone before 1.2.0, Ozone Datanode doesn’t check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
Related
osv
osv
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
CVE-2021-39235
2021-11-19 10:15:08
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
veracode
veracode
Privilege Escalation
2021-11-22 10:38:49
cve
cve
CVE-2021-39235
2021-11-19 10:15:08
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08