Zookeeper@3.5.3 Security Vulnerabilities and Issues — Zookeeper@3.5.3 CVE List

Lucene search

ApacheZookeeper3.5.3

2 matches found

CVE•added 2019/05/23 2:29 p.m.•188 views

CVE-2019-0201

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider ...

5.9CVSS5.8AI score0.00237EPSS

CVE•added 2018/05/21 7:29 p.m.•110 views

CVE-2018-8012

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.

7.5CVSS7.3AI score0.0113EPSS