CVE-2020-35451CWE-377

Oozie local privilege escalation

published March 9, 2021

CVSS
—
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.6th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2021-03-09T15:20Z
EPSS history
Timeline
  • 09 MAR 15:20Z
    Oozie local privilege escalation
    cvelistv5