CVE-2021-39236

Publication date

2021-11-19 09:20:25

Family

apache

State

PUBLISHED

Description

In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.