CVE-2018-8012

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta

published May 21, 2018

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08469 · 95.0th percentile
Published
2018-05-21T19:00Z
EPSS history
Timeline
  • 21 MAY 19:00Z
    No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta
    cvelistv5