CVE-2021-41532
published 2021-11-19CVE-2021-41532: In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data…
medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | ozone | < 1.2.0 | 1.2.0 |
| apache_software_foundation | apache_ozone | Everglades (1.1.0) – 1.1.0 | — |