Home

CVE-2021-39236

Description

In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.638

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-39236 are fixed in Apache-hadoop-ozone-ozone-manager 1.2.0Windows
Vulnerabilities CVE-2021-39236 are fixed in Apache-hadoop-ozone-ozone-manager for Linux 1.2.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234