← voltar
CVE-2021-36372CWE-273

Original block tokens are persisted and can be retrieved

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.4%
probabilidade de exploração
2.4%top 17% das CVEs
exploração observada
nãonenhuma fonte reporta
In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.