CVE-2022-1816

A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/publichtml/viewaccounts?type=zookeeper of the content module. The manipulation of the argument adminname with the input leads to an authenticated cross site...

PT-2022-14135 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A problematic issue has been found in the Zoo Management System, affecting the /zoo/admin/public html/view accounts?type=zookeeper endpoint of the content module. The manipulation of the admin na...

Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse

JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text:...

GHSA-H259-3RJG-5QP3 Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse

JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text:...

Uncontrolled Resource Consumption in Apache ZooKeeper

Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10,...

cn.acooly:acooly-auth-wechat-authenticator (=5.2.1), cn.org.thinkcloud:think-cloud-starter-id (=2.0.1.RELEASE) +398 more potentially affected by CVE-2017-5637 via org.apache.zookeeper:zookeeper (>=3.5.1-alpha <=3.5.3-beta)

org.apache.zookeeper:zookeeper MAVEN version =3.5.1-alpha, =3.2.0, =3.0.5, =3.0.5, =0.85, =3.2.0, =3.2.0, =3.3.0-RELEASE, =3.0.0, =1.0.0, =3.0.2-beta1 and more Source cves: CVE-2017-5637 Source advisory: OSV:GHSA-7CWJ-J333-X7F7...

at.salzburgresearch.nodekeeper:nodekeeper-java (>=1.0 <=1.2), com.baidu.beidou:navi-rpc (=1.1.0) +85 more potentially affected by CVE-2017-5637 via org.apache.zookeeper:zookeeper (>=3.4.0 <=3.4.1)

org.apache.zookeeper:zookeeper MAVEN version =3.4.0, =1.0, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =0.13, =0.13, =0.13, =0.16, =0.13, =0.15, =0.13, =0.15, =0.17 and more Source cves: CVE-2017-5637 Source advisory: OSV:GHSA-7CWJ-J333-X7F7...

GHSA-7CWJ-J333-X7F7 Uncontrolled Resource Consumption in Apache ZooKeeper

Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10,...

at.salzburgresearch.nodekeeper:nodekeeper-java (>=1.0 <=1.2), ca.innovativemedicine:vcfimp-solr_2.10 (=0.7.0) +759 more potentially affected by CVE-2018-8012 via org.apache.zookeeper:zookeeper (>=3.3.0 <=3.4.1)

org.apache.zookeeper:zookeeper MAVEN version =3.3.0, =1.0, =0.2, =2.0.0, =1.0.0.RELEASE, =2.0.10, =2.5, =2.5, =2.6.11, =2.6.20, =5.0.1.5, =5.0.2, =6.5.5 - com.boozallen.cognition:cognition-spark-common =0.4.0 and more Source cves: CVE-2018-8012 Source advisory: OSV:GHSA-CCQF-C5HQ-77MP...

GHSA-CCQF-C5HQ-77MP Missing Authorization in Apache ZooKeeper

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...

Missing Authorization in Apache ZooKeeper

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader...

cn.acooly:acooly-auth-wechat-authenticator (=5.2.1), cn.org.thinkcloud:think-cloud-starter-id (=2.0.1.RELEASE) +467 more potentially affected by CVE-2018-8012 via org.apache.zookeeper:zookeeper (>=3.5.0-alpha <=3.5.3-beta)

org.apache.zookeeper:zookeeper MAVEN version =3.5.0-alpha, =3.2.0, =3.0.5, =3.0.5, =0.85, =3.2.0, =3.2.0, =3.3.0-RELEASE, =0.2.2, =0.1.2, =0.2.0, =0.2.1 and more Source cves: CVE-2018-8012 Source advisory: OSV:GHSA-CCQF-C5HQ-77MP...

Critical Photon OS Security Update - PHSA-2022-0373

Updates of 'zookeeper', 'openssl', 'nxtgn-openssl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-3.0-0373

Updates of 'nxtgn-openssl', 'zookeeper', 'openssl' packages of Photon OS have been released...

Mageia: Security Advisory (MGASA-2016-0328)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0126-1 Security update for openstack-monasca-agent, spark, spark-kit, zookeeper

This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues: - CVE-2021-4104: Remove JMSAppender from log4j jars bsc1193662...

Exploit for Deserialization of Untrusted Data in Apache Dubbo

CVE-2021-43297 Vulnerability Description There is a poten...

SUSE-SU-2021:4160-1 Security update for logstash, elasticsearch, kafka, zookeeper, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh

This update for logstash, elasticsearch, kafka, zookeeper, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh fixes the following issues: Fixed vulnerability related to log4j version 1.2.x: - CVE-2021-4104: Fixed remote code execution through the JMS API via the...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 68. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: Apache Commons Beanutils...

Central Dogma 安全漏洞

Central Dogma is an open source service configuration version control repository based on Git, ZooKeeper and HTTP/2. A security vulnerability exists in Central Dogma that allows elevation of privilege by mirroring to an internal Dogma repository with files that manage project authorizations...