Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.5.3-beta
purl pkg:maven/org.apache.zookeeper/zookeeper@3.5.3-beta
Next non-vulnerable version 3.8.6
Latest non-vulnerable version 3.9.5
Risk score 4.1
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-7286-pgfv-vxvh
Aliases:
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the …
3.7.2
Vulnerable
CVE-2018-8012

Missing Authorization No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper. As a result …
3.4.10
Vulnerable
CVE-2019-0201

Information disclosure ZooKeeper's `getACL()` command does not check any permission when retrieves the ACLs of the requested node and returns …
3.4.14
Vulnerable
3.5.5
Vulnerable
GHSA-2hw2-62cp-p9p7
Aliases:
CVE-2019-0201
Access control bypass in Apache ZooKeeper An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. …
3.5.5
Vulnerable
3.5.5
Vulnerable
GHSA-ccqf-c5hq-77mp
Aliases:
CVE-2018-8012
Missing Authorization in Apache ZooKeeper No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper …
3.5.4-beta
Vulnerable
3.5.4-beta
Vulnerable
This package is not known to fix any advisories.