Search CVE reports
1 – 10 of 16 results
(An unauthenticated attacker can inject arbitrary fake log lines into A ...)
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(When audit logging is enabled (zookeeper.audit.enable=true), an unauth ...)
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(The `deleteContainer` opcode (0x14/20) is processed without verifying ...)
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(Apache ZooKeeper quorum TLS fails to enforce peer hostname verificatio ...)
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(Information disclosure via SetWatches reconnect replay in Apache ZooKe ...)
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration...
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid...
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions. This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4. Users are recommended to...
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of...
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Not affected | Vulnerable | Not affected | Not affected | Not affected |
Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker...
1 affected package
zookeeper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zookeeper | Not affected | Vulnerable | Not affected | Not affected | Not affected |