CVE-2021-39232
Missing admin check for SCM related admin commands
- State
- Published
- Severity
- Not scored
- Published
- Nov 19, 2021
- Updated
- Aug 4, 2024
- Reserved
- Aug 17, 2021
Description
In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins.
Scores
The record has no CVSS score.
Weaknesses
- CWE-862 Missing Authorization
Affected Products
| Product | Versions |
|---|---|
Apache OzoneApache Software Foundation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.