CVE-2021-39236 | BDVDB-2026-164657 Detail
ApacheApache Ozone
Description#
In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.