CVE-2021-39233

Incorrect Authorization in maven/org.apache.ozone/ozone-datanode

Identifiers

CVE-2021-39233

Package Slug

maven/org.apache.ozone/ozone-datanode

Vulnerability

Incorrect Authorization

Description

In Apache Ozone, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.

Affected Versions

All versions before 1.2.0

Solution

Upgrade to version 1.2.0 or above.

Last Modified

2021-11-22

source