Lucene search
+L

2 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.11 views

The implementation of the wchp/wchc command in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper is vulnerable. This vulnerability stems from the lack of authentication for the critical function, allowing a malicious actor operating remotely to cause service failures.

The vulnerability of the wchp/wchc command implementation in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to the lack of authentication for the critical function. Exploiting this...

7.8CVSS7.2AI score0.73654EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.7 views

The implementation of the getACL() command in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services in Apache ZooKeeper is vulnerable. This vulnerability allows attackers to exploit certain hash function values.

The vulnerability of the getACL function in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to permission handling errors. Exploiting this vulnerability can allow an attacker to exploi...

5.9CVSS6.8AI score0.09634EPSS
SaveExploits0References10Affected Software10
Rows per page
Query Builder