Description
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.atomix:atomix | <= 3.1.5 | — | GHSA-7fr2-94h7-ccg2 |
High · 7.5
CVE-2020-35209
EUVD-2021-2470GHSA-7fr2-94h7-ccg2
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
Published Dec 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre