Authentication Bypass

Apache Zookeeper is vulnerable to authentication bypasses. The application does not have authentication or authorization when a server joins a QuarumPeer, allowing a malicious user to connect to an arbitrary endpoint to pass malicious changes to the quorum...