CVE-2021-39233: Incorrect Authorization

November 19, 2021 (updated November 7, 2023)

In Apache Ozone, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.

References

www.openwall.com/lists/oss-security/2021/11/19/4
mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C394a9a73-44dd-b5db-84d8-607c3226eb00%40apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2021-39233

Detect and mitigate CVE-2021-39233 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →