org.apache.hadoop:hadoop-ozone-ozone-manager@1.1.0 vulnerabilities
-
latest version
1.1.0
-
first published
5 years ago
-
latest version published
3 years ago
-
licenses detected
- [0.4.0-alpha,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.hadoop:hadoop-ozone-ozone-manager package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Access Restriction Bypass. Authenticated users knowing the ID of an existing block can craft a specific request allowing access to those blocks, bypassing other security checks like ACL. How to fix Access Restriction Bypass? Upgrade |
[,1.2.0)
|
Affected versions of this package are vulnerable to Access Restriction Bypass. Container-related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client. How to fix Access Restriction Bypass? Upgrade |
[,1.2.0)
|