CVE-2020-35451

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.

Score

CVSS 3.1 4.7 Medium

Status

Modified - security@apache.org

Published

2021-03-09

Last modified

2025-02-13

Weaknesses

CWE-362, CWE-377

Affected products

• Oozie (Apache)
• Apache Oozie (Apache Software Foundation)

References

• http://www.openwall.com/lists/oss-security/2021/03/09/2
• https://lists.apache.org/thread.html/r8688debdb8b586aab3e53dee2d675fc9212de0ec627a8d3cd43b5ab5%40%3Cuser.oozie.apache.o…