CVE-2021-39231 — Missing authentication/authorization on internal RPC endpoints
In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data f…
Published: 2021-11-19 · CVSS: Unscored
In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7