Search for packages
| purl | pkg:maven/org.apache.zookeeper/zookeeper@3.4.14 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-7286-pgfv-vxvh
Aliases: CVE-2023-44981 |
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-8012
|
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through … | |
|
CVE-2019-0201
|
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any … | |
|
CVE-2017-5637
|
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server … | |
|
CVE-2019-0201
|
Information disclosure ZooKeeper's `getACL()` command does not check any permission when retrieves the ACLs of the requested node and returns … | |
|
GHSA-2hw2-62cp-p9p7
|
Access control bypass in Apache ZooKeeper An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. … |
CVE-2019-0201
|