Homepage
About Snyk

org.apache.hadoop:hadoop-hdds-container-service@0.4.1-alpha vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.apache.hadoop:hadoop-hdds-container-service package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Improper Access Control

Affected versions of this package are vulnerable to Improper Access Control. Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.

How to fix Improper Access Control?

Upgrade org.apache.hadoop:hadoop-hdds-container-service to version 1.1.0 or higher.

[,1.1.0)
  • H
Access Restriction Bypass

Affected versions of this package are vulnerable to Access Restriction Bypass. Container-related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.

How to fix Access Restriction Bypass?

Upgrade org.apache.hadoop:hadoop-hdds-container-service to version 1.2.0 or higher.

[,1.2.0)
Go back to all versions of this package