279 matches found
zookeeper: Apache ZooKeeper: Unauthorized znode deletion via missing ACL check
A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...
7.5CVSS5.7AI score0.00603EPSS
SaveExploits0References5
20