zookeeper vulnerabilities (Bitnami)
12 vulnerabilities.
-
zookeeperBitnami Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider 5.3 Medium -
zookeeperBitnami Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources 5.3 Medium -
zookeeperBitnami Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode 7.5 High -
zookeeperBitnami Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode 7.5 High -
zookeeperBitnami Apache ZooKeeper: Information disclosure via SetWatches reconnect replay 7.5 High -
zookeeperBitnami Apache ZooKeeper: Sensitive information disclosure in client configuration handling 7.5 High -
zookeeperBitnami Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager 7.4 High -
zookeeperBitnami Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands 4.3 Medium -
zookeeperBitnami Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server 9.1 Critical -
zookeeperBitnami Apache ZooKeeper: Information disclosure in persistent watcher handling 5.3 Medium -
zookeeperBitnami Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication 9.1 Critical -
zookeeperBitnami Possible request smuggling in HTTP/2 due missing validation 5.9 Medium