GHSA-33xh-xch9-p6hj
Incorrect Authorization in Apache Ozone
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.ozone:ozone-main | < 1.2.0 | 1.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.
References
External links from the advisory. They lead to third-party sites.