Lucene search
+L

4 matches found

OSV
OSV
•added 2024/03/31 6:32 p.m.•54 views

BIT-ZOOKEEPER-2024-23944 Apache ZooKeeper: Information disclosure in persistent watcher handling

Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher addWatch command to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when th...

5.3CVSS5.3AI score0.00246EPSS
SaveExploits0References3
Rows per page
Query Builder