CVE-2021-39231: In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to…

critical9.1CVSS 3.1

AVNACLPRNUINSUCHIHAN

In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	ozone	< 1.2.0	1.2.0
apache_software_foundation	apache_ozone	1.0 – 1.0	—