CVE-2021-41532

Publication date

2021-11-19 09:20:26

Family

apache

State

PUBLISHED

Description

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.