CVE-2020-35211

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

7.5 High

CVE-2020-35211 is a high vulnerability (CVSS 7.5) in Atomix, published December 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. No source names a fixed version.

What does this mean?

Severity: 7.5 HighCVSS 3.1, NVD
Exploit chance: 1.07%EPSS, 65th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

1.07%Up 0.7 points since Dec 20, 2021

Affected products

atomix

Affected packages

Affected packages
Package	Affected	Fixed
`io.atomix:atomix` Maven	through 3.1.5	None known
`io.atomix:atomix` Maven	through 3.1.5, plus listed versions 0.1.0-beta10.1.0-beta20.1.0-beta30.1.0-beta40.1.0-beta5 Show 45 moreShow less 1.0.01.0.0-rc11.0.0-rc21.0.0-rc31.0.0-rc41.0.0-rc51.0.0-rc61.0.0-rc71.0.0-rc81.0.0-rc91.0.11.0.1-rc11.0.21.0.31.0.41.0.51.0.61.0.71.0.82.0.02.0.0-alpha12.0.0-raft-beta12.0.0-raft-final2.0.12.0.102.0.112.0.122.0.132.0.142.0.152.0.162.0.172.0.182.0.192.0.22.0.202.0.212.0.222.0.232.0.242.0.252.0.262.0.272.0.282.0.29	None known

What each source reports

NVD Score used7.5

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Record: CVE-2020-35211
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE ListNo score

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Record: CVE-2020-35211
Updated: 2026-11-02

EUVDEUVD-2021-2439No score

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Record: EUVD-2021-2439
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4jhc-wjr3-pwh27.5

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Record: GHSA-4jhc-wjr3-pwh2
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVGHSA-4jhc-wjr3-pwh27.5

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext.

Record: GHSA-4jhc-wjr3-pwh2
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

This page doesn't list everything

Left out here: 45 versions. The JSON record has them.