Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-41532

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gc37-9g7f-96fx

Apache Ozone exposes OM, SCM and Datanode metadata In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

gitlab/maven/org.apache.ozone/ozone/CVE-2021-41532

Exposure of Resource to Wrong Sphere In Apache Ozone, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

gitlab/maven/org.apache.ozone/ozone-main/CVE-2021-41532

Exposure of Resource to Wrong Sphere In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.