GHSA-gc37-9g7f-96fx
Apache Ozone exposes OM, SCM and Datanode metadata
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.ozone:ozone-main | < 1.2.0 | 1.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.
References
External links from the advisory. They lead to third-party sites.