GHSA-86fh-j58m-7pf5
Improper Privilege Management in Apache Ozone
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.ozone:ozone-main | < 1.2.0 | 1.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.
References
External links from the advisory. They lead to third-party sites.