Lucene search
Veracode Vulnerability DatabaseVERACODE:33049HistoryNov 22, 2021 - 10:38 a.m.
Privilege Escalation
2021-11-2210:38:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
34.3%
hadoop-ozone-ozone-manager is vulnerable to privilege escalation. The library does not check the access mode parameter of the block token, allowing an attacker with a read block token to do write operations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache ozone manager server | le | 1.0.0 | |
| apache ozone manager server | le | 1.0.0 |
Related
osv
osv
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
CVE-2021-39235
2021-11-19 10:15:08
github
github
Incorrect permissions in Apache Ozone
2021-11-23 18:17:41
cnvd
cnvd
Apache Ozone input validation error vulnerability
2021-11-24 00:00:00
cve
cve
CVE-2021-39235
2021-11-19 10:15:08
prion
prion
Code injection
2021-11-19 10:15:00
cvelist
cvelist
CVE-2021-39235 Access mode of block tokens are not enforced
2021-11-19 09:20:23
nvd
nvd
CVE-2021-39235
2021-11-19 10:15:08