Description:

Authenticated users with valid Ozone S3 credentials can create specific OM 
requests, impersonating any other user. 

This issue is being tracked as HDDS-4763

Mitigation:

Upgrade to Apache Ozone release version 1.2.0

Credit:

Apache Ozone would like to thank Marton Elek for reporting this issue.

Reply via email to