No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2018-05-21T00:00:00
Updated: 2021-07-20T10:06:52
Reserved: 2018-03-09T00:00:00
Link: CVE-2018-8012
JSON object: View
NVD Information
Status : Modified
Published: 2018-05-21T19:29:00.250
Modified: 2023-11-07T03:01:20.953
Link: CVE-2018-8012
JSON object: View
Redhat Information
No data.
CWE