PT-2021-22486 · Apache · Apache Ozone

Name of the Vulnerable Software and Affected Versions: Apache Ozone versions prior to 1.2.0 Description: The issue allows authenticated users with valid Ozone S3 credentials to create specific OM requests, impersonating any other user. Recommendations: For versions prior to 1.2.0, update to versi...