← Database

CVE-2021-41532

MEDIUM CVSS: 5.3 Published: 2021-11-19 Modified: 2026-06-17

Description

In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.

Affected Platforms

Apache Ozone

Weakness Type

CWE-200, NVD-CWE-noinfo

References