Vulnerabilities > CVE-2021-39234 - Incorrect Authorization vulnerability in Apache Ozone
Attack vector
NETWORK Attack complexity
HIGH Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific request allowing access those blocks, bypassing other security checks like ACL.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 12 |