CVE-2021-39235

creationtimestamp| type| source ---|---|--- 2021-11-19 12:16:39+00:00| seen| https://t.me/cibsecurity/32680...

CVE-2021-39235

CVE-2021-39235 affects Apache Ozone prior to 1.2.0. The vulnerability stems from Ozone Datanode not validating the block token’s access mode parameter, allowing authenticated users with a valid READ token to perform write operations on the same block. This issue is consistently described across N...

CVE-2021-39235 Access mode of block tokens are not enforced

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block...