org.apache.hadoop:hadoop-hdds-common@1.1.0 vulnerabilities
-
latest version
1.1.0
-
first published
5 years ago
-
latest version published
3 years ago
-
licenses detected
- [0.4.0-alpha,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.hadoop:hadoop-hdds-common package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Access Restriction Bypass. Container-related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client. How to fix Access Restriction Bypass? Upgrade |
[,1.2.0)
|
Affected versions of this package are vulnerable to Access Restriction Bypass. Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints. How to fix Access Restriction Bypass? Upgrade |
[,1.2.0)
|