Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-39236

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5993-wwpg-m92c

Apache Ozone user impersonation due to non-validation of Ozone S3 tokens In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.

gitlab/maven/org.apache.hadoop/hadoop-ozone-ozone-manager/CVE-2021-39236

Improper Authentication In Apache Ozone, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.

gitlab/maven/org.apache.ozone/ozone/CVE-2021-39236

This advisory has been marked as False Positive and moved to org.apache.hadoop:hadoop-ozone-ozone-manager.

gitlab/maven/org.apache.ozone/ozone-main/CVE-2021-39236

This advisory has been marked as False Positive and moved to org.apache.hadoop:hadoop-ozone-ozone-manager.