~ / search / GHSA-ff84-84q5-fq4f

GHSA-ff84-84q5-fq4f

Incorrect Authorization in Apache Ozone

Source: GitHub Advisory Database (reviewed) High CVE-2021-39232

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.ozone:ozone-main < 1.2.0 1.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins.

References

External links from the advisory. They lead to third-party sites.