Lucene search
+L

4 matches found

CNVD
CNVD
added 2021/11/24 12:0 a.m.31 views

Apache Ozone has unspecified vulnerabilities

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments. a security vulnerability in Apache Ozone version 1.2.0, which stems from the fact that certain administrator-related SCM commands can be executed by any authenticated user...

9.1CVSS3.6AI score0.02296EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/19 10:15 a.m.6 views

CVE-2021-39232

In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins...

8.8CVSS7.2AI score0.01632EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/11/19 9:20 a.m.35 views

CVE-2021-39232 Missing admin check for SCM related admin commands

In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins...

8.9AI score0.01632EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/03/17 6:0 a.m.39 views

CVE-2020-11220

While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile,...

6.7AI score0.00136EPSS
SaveExploits0References1
Rows per page
Query Builder