Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | zookeeper | 3.4.9-3+deb9u2 |
Vulnerabilities 1
-
Medium 5.9
Access control bypass in Apache ZooKeeper
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plainte…