CVE-2021-39235 — Access mode of block tokens are not enforced
In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operati…
Published: 2021-11-19 · CVSS: Unscored
In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7