CVE-2021-39232CWE-862

Missing admin check for SCM related admin commands

published November 19, 2021

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01686 · 76.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-11-19T09:20Z
EPSS history
Timeline
  • 19 NOV 09:20Z
    Missing admin check for SCM related admin commands
    cvelistv5