Executive brief
Malicious Atomix node queries expose sensitive information
Affected products
- Maven io.atomix:atomix
Junglewise Threat Intelligence
CVE-2020-35215: Malicious Atomix node queries expose sensitive information
CVE-2020-35215 · Severity: low · CVSS 3.1 · Published 2021-12-17
Technologies: io.atomix:atomix (Maven). Vendors: Maven.
Related threats
- An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
- An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.
- A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessi
- An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.
- An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.