Search for packages
| purl | pkg:maven/org.apache.zookeeper/zookeeper@3.4.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-8012
|
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-5637
|
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-7286-pgfv-vxvh
Aliases: CVE-2023-44981 |
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the … |
Vulnerable |
|
CVE-2018-8012
|
Missing Authorization No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper. As a result … |
Vulnerable |
|
CVE-2019-0201
|
Information disclosure ZooKeeper's `getACL()` command does not check any permission when retrieves the ACLs of the requested node and returns … |
Vulnerable Vulnerable |
|
GHSA-2hw2-62cp-p9p7
Aliases: CVE-2019-0201 |
Access control bypass in Apache ZooKeeper An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. … |
Vulnerable Vulnerable |
|
GHSA-7cwj-j333-x7f7
Aliases: CVE-2017-5637 |
Uncontrolled Resource Consumption in Apache ZooKeeper Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-ccqf-c5hq-77mp
Aliases: CVE-2018-8012 |
Missing Authorization in Apache ZooKeeper No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper … |
Vulnerable Vulnerable Vulnerable |