Skip to content
OpenAdvisories
Unscored CVE-2020-35451 EUVD-2020-23125GHSA-9rqf-w99j-7c4r

Oozie local privilege escalation

Published Mar 9, 2021 · Updated Feb 13, 2025 · Assigned by apache

Description

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Oozie unspecified – < 5.2.1 5.2.1

References