Lucene search
K

CVE-2021-39236

šŸ—“ļøĀ 22 May 2025Ā 20:42:48Reported byĀ redhat.comTypeĀ 
redhatcve
Ā redhatcve
šŸ”—Ā access.redhat.comšŸ‘Ā 1Ā Views

CVE-2021-39236: Apache Ozone before 1.2.0 allows authenticated Storage Service users to impersonate any user.

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-39236
19 Nov 202112:16
–circl
CNNVD
Apache Ozone ęŽˆęƒé—®é¢˜ę¼ę“ž
19 Nov 202100:00
–cnnvd
CNVD
Apache Ozone Licensing Issue Vulnerability (CNVD-2021-91629)
24 Nov 202100:00
–cnvd
CVE
CVE-2021-39236
19 Nov 202109:20
–cve
Cvelist
CVE-2021-39236 Owners of the S3 tokens are not validated
19 Nov 202109:20
–cvelist
Github Security Blog
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
23 Nov 202117:56
–github
NVD
CVE-2021-39236
19 Nov 202110:15
–nvd
OSV
GHSA-5993-WWPG-M92C Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
23 Nov 202117:56
–osv
Prion
Code injection
19 Nov 202110:15
–prion
Positive Technologies
PT-2021-22486 Ā· Apache Ā· Apache Ozone
19 Nov 202100:00
–ptsecurity
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Mar 2026 13:39Current
7.2High risk
Vulners AI Score7.2
CVSS 26.5
CVSS 3.18.8
EPSS0.00638
1