CVE-2019-15024

Аn attacker that has write access to ZooKeeper and who can run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the...

Security Bulletin: Multiple vulnerabilities have been identified in bundled libraries of IBM Tivoli Netcool/OMNIbus Common Integration Libraries (CVE-2019-12086, CVE-2019-0201)

Summary FasterXML Jackson library is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Transformer for Message Bus Integration. Information about security vulnerabilities affecting FasterXML Jackson library has been published...

Security Bulletin: Watson Explorer is affected by an Apache Zookeeper vulnerability (CVE-2019-0201)

Summary IBM Watson Explorer has addressed the following vulnerability in Apache ZooKeeper. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL command. By...

Security Bulletin: IBM Netcool Agile Service Manager is affected by an Apache Zookeeper vulnerability (CVE-2019-0201)

Summary IBM Netcool Agile Service Manager has addressed the following vulnerability in Apache ZooKeeper. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL...

Security Bulletin: IBM Event Streams is affected by Apache ZooKeeper vulnerability CVE-2019-0201

Summary IBM Event Streams has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL command. By sending a...

Photon OS 1.0: Zookeeper PHSA-2019-1.0-0237

An update of the zookeeper package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0237. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian DSA-4461-1 : zookeeper - security update

Harrison Neil discovered that the getACL command in Zookeeper, a service for maintaining configuration information, did not validate permissions, which could result in information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Debian: Security Advisory (DSA-4461-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-4461-1 zookeeper - security update

Bulletin has no description...

Critical Photon OS Security Update - PHSA-2019-0237

Updates of 'libvirt', 'wget', 'python3', 'glib', 'curl', 'openssh', 'sqlite-autoconf', 'binutils', 'python2', 'zookeeper', 'vim', 'gnupg' packages of Photon OS have been released...

[SECURITY] [DSA 4461-1] zookeeper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4461-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 12, 2019 https://www.debian.org/security/faq -...

Important Photon OS Security Update - PHSA-2019-0017

Updates of 'curl', 'consul', 'wpasupplicant', 'openssh', 'libtiff', 'zookeeper' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-3.0-0017

Updates of 'consul', 'curl', 'zookeeper', 'wpasupplicant', 'openssh', 'libtiff' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0161

Updates of 'linux-aws', 'linux', 'kubernetes', 'polkit', 'wget', 'linux-secure', 'elfutils', 'python2', 'mesos', 'glib', 'python3', 'libsoup', 'linux-esx', 'libvirt', 'tar', 'curl', 'libtiff', 'libarchive', 'zookeeper' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0161

An update of 'libarchive', 'elfutils', 'wget', 'go', 'curl', 'linux-secure', 'python2', 'kubernetes', 'linux-esx', 'linux-aws', 'libtiff', 'mesos', 'glib', 'libsoup', 'libvirt', 'zookeeper', 'tar', 'linux', 'polkit', 'python3' packages of Photon OS has been released...

Apache ZooKeeper 3.4.0 < 3.4.10 / 3.5.x < 3.5.3 Multiple Vulnerabilities

The version of Apache ZooKeeper listening on the remote host is prior to 3.4.10 or 3.5.x prior to 3.5.3. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability in the C cli shell. Using the 'cmd:' batch mode syntax allows attackers to have an unspecified impact...

Apache ZooKeeper < 3.4.14 / 3.5.x < 3.5.5 Information Disclosure

The version of Apache ZooKeeper listening on the remote host is prior to 3.4.14 or 3.5.x prior to 3.5.5. It is, therefore, affected by an information disclosure vulnerability in ZooKeeper's getACL command as a result of not checking requester permissions. An unauthenticated, remote attacker can...

CVE-2019-0201

A flaw was found in Apache ZooKeeper. A lack of permission checks while retrieving ACLs allows unsalted hash values to be disclosed for unauthenticated or unprivileged users. Mitigation Use an authentication method other than Digest e.g. Kerberos or upgrade to zookeeper 3.4.14 or later 3.5.5 or...

au.com.skytix:mesos-scheduler-client (>=1.0.0 <=1.0.3), cn.acooly:acooly-auth-wechat-authenticator (=5.2.1) +513 more potentially affected by CVE-2019-0201 via org.apache.zookeeper:zookeeper (>=3.5.1-alpha <=3.5.4-beta)

org.apache.zookeeper:zookeeper MAVEN version =3.5.1-alpha, =1.0.0, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =3.6.5, =3.2.0, =2.2.0, =2.2.1 and more Source cves: CVE-2019-0201 Source advisory: OSV:GHSA-2HW2-62CP-P9P7...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.tripl:arc-big-query-pipeline-plugin_2.12 (>=1.0.0 <=1.8.0) +2737 more potentially affected by CVE-2019-0201 via org.apache.zookeeper:zookeeper (>=3.3.0 <=3.4.13)

org.apache.zookeeper:zookeeper MAVEN version =3.3.0, =1.0.1, =1.0.0, =1.4.0, =1.4.0, =1.0.0, =1.3.0, =1.0.0, =1.0.0, =1.0.0, =1.3.0, =1.3.0, =1.0.0, =3.0.0, =1.0, =1.2 - ca.innovativemedicine:vcfimp-solr2.10 =0.7.0 and more Source cves: CVE-2019-0201 Source advisory: OSV:GHSA-2HW2-62CP-P9P7...