{"action":"Upgrade org.apache.ozone:ozone-main to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"org.apache.ozone:ozone-main","cve_ids":["CVE-2021-36372"],"ecosystem":"Maven","epss":0.02526,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-86fh-j58m-7pf5","id":"tcs_01M5N8M1CB0JNPSGQQ7Q8ETNWA","modified_at":"2024-01-31T15:13:11Z","published_at":"2021-11-23T17:57:14Z","references":["https://osv.dev/vulnerability/GHSA-86fh-j58m-7pf5","https://nvd.nist.gov/vuln/detail/CVE-2021-36372","https://github.com/apache/ozone","https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C5029c1ac-4685-8492-e3cb-ab48c5c370cf%40apache.org%3E","http://www.openwall.com/lists/oss-security/2021/11/19/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-86fh-j58m-7pf5","url":"https://osv.dev/vulnerability/GHSA-86fh-j58m-7pf5"}],"summary":"Improper Privilege Management in Apache Ozone"}