CVE-2021-41532CWE-200

Unauthenticated access to Ozone Recon HTTP endpoints

published November 19, 2021

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02391 · 83.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-11-19T09:20Z
EPSS history
Timeline
  • 19 NOV 09:20Z
    Unauthenticated access to Ozone Recon HTTP endpoints
    cvelistv5