Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-39231

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3w5h-x4rh-hc28

Exposure of sensitive information in Apache Ozone In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

gitlab/maven/org.apache.ozone/ozone/CVE-2021-39231

Exposure of Resource to Wrong Sphere In Apache Ozone, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

gitlab/maven/org.apache.ozone/ozone-datanode/CVE-2021-39231

Exposure of Resource to Wrong Sphere In Apache Ozone, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

gitlab/maven/org.apache.ozone/ozone-main/CVE-2021-39231

Exposure of Resource to Wrong Sphere In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.