CVE-2021-39232

Incorrect Authorization in maven/org.apache.ozone/ozone

Identifiers

CVE-2021-39232

Package Slug

maven/org.apache.ozone/ozone

Vulnerability

Incorrect Authorization

Description

In Apache Ozone, certain admin related SCM commands can be executed by any authenticated users, not just by admins.

Affected Versions

All versions before 1.2.0

Solution

Upgrade to version 1.2.0 or above.

Last Modified

2021-11-22

source