GHSA-gc37-9g7f-96fxMediumCVSS 5.3

Apache Ozone exposes OM, SCM and Datanode metadata

Published
November 23, 2021
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2021-41532 →

📋 Description

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

🎯 Affected products1

  • maven/org.apache.ozone:ozone-main:< 1.2.0

🔗 References (4)