| CVE-2024-45106 |
Improper authentication of an HTTP endpoint in the S3 Gateway of Apache Ozone 1.4.0 allows any authenticated Kerberos…
|
Not rated
|
Dec 3, 2024 |
| CVE-2023-39196 |
Improper Authentication vulnerability in Apache Ozone
|
5.3
Medium
|
Feb 7, 2024 |
| CVE-2021-41532 |
In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39236 |
In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests,…
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39235 |
In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39234 |
In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific…
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39233 |
In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly…
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39232 |
In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated…
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-39231 |
In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for…
|
Not rated
|
Nov 19, 2021 |
| CVE-2021-36372 |
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can…
|
Not rated
|
Nov 19, 2021 |
| CVE-2020-17517 |
The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default
|
Not rated
|
Apr 27, 2021 |