In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Apache Software Foundation

Apache Ozone

Affected Versions:

Everglades (1.1.0)

References

https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3Ce0bc6598-9669-b897-fc28-de8a896e36aa%40apache.org%3E

http://www.openwall.com/lists/oss-security/2021/11/19/8

Published: 2021-11-19T09:20:26

Last Modified: 2024-08-04T03:15:29.160Z

Copied to clipboard!