CVE-2019-0201

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-0201
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0201.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-0201
Aliases
Downstream
Related
Published
2019-05-23T14:29:07.517Z
Modified
2026-03-15T22:21:11.186454Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.

References

Affected packages

Git / github.com/apache/activemq

Affected ranges

Type
GIT
Repo
https://github.com/apache/activemq
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
855ba82071e0ce64d9b38cc610edfd38ed332cb3
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.15.9"
        }
    ]
}
Type
GIT
Repo
https://github.com/apache/zookeeper
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab2aa27ff452a3c2331761854a9bf5a63e01954c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
59adfa23fb6c1b9034283d6fc09cd7a4a8e6e0b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1ce2f9e1952004fc10924eb13c585c24d6523ba8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0014376a18ba46df973b06e85bcf6694b0fa91d4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2ff69d0a3100d42b153feda96a66f518c59347e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28b0bd08f5ec95b4743f04963867180377378bd4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
75276c6dfc659765ec89dadffbc4b61a18b91a5f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3f572f0a3568ad21d7a1175ecde007b222c74cf4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
554ad8c4d79e5077961a964d7bee2b413b9ea0ea
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8a224f4821e5201ba8816731c6b1a28582210f4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8ce24f9e675cbefffb8f21a47e06b42864475a60
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8ce24f9e675cbefffb8f21a47e06b42864475a60
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8ce24f9e675cbefffb8f21a47e06b42864475a60
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.0-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.1-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.2-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.2-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.2-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.3-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.3-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.3-rc1"
        }
    ]
}
Type
GIT
Repo
https://github.com/libfuse/libfuse
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ec8e1c9406451262b6fd3c93787b2bb6d745ea5
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.5.0-NA"
        }
    ]
}

Affected versions

activemq-5.*
activemq-5.10.0
activemq-5.11.0
activemq-5.12.0
activemq-5.13.0
activemq-5.14.0
activemq-5.15.0
activemq-5.15.1
activemq-5.15.2
activemq-5.15.3
activemq-5.15.4
activemq-5.15.5
activemq-5.15.6
activemq-5.15.7
activemq-5.15.8
activemq-5.15.9
activemq-5.9.0
Other
before_interruptible
debian_version_0_95-1
debian_version_1_0-1
fuse_0_9
fuse_0_95
fuse_1_1
fuse_1_1_pre2
fuse_1_9
fuse_2_2
fuse_2_2_pre1
fuse_2_2_pre4
fuse_2_2_pre5
fuse_2_2_pre6
fuse_2_3_0
fuse_2_3_pre1
fuse_2_3_pre2
fuse_2_3_pre3
fuse_2_3_pre4
fuse_2_3_pre5
fuse_2_3_pre6
fuse_2_3_pre7
fuse_2_3_rc1
fuse_2_4_0
fuse_2_4_0_pre2
fuse_2_4_0_rc1
fuse_2_4_1
fuse_2_5_0
fuse_2_5_0_pre1
fuse_2_5_0_pre2
fuse_2_6_0
fuse_2_6_0_pre1
fuse_2_6_0_pre2
fuse_2_6_0_pre3
fuse_2_6_0_rc1
fuse_2_6_0_rc2
fuse_2_6_0_rc3
fuse_2_6_1
fuse_2_7_0
fuse_2_7_0_rc1
fuse_2_7_1
fuse_2_7_2
fuse_2_7_2_before_indent
fuse_2_8_0
fuse_2_8_0_pre2
fuse_2_8_1
fuse_2_8_2
fuse_2_8_3
fuse_2_8_4
fuse_2_8_start
fuse_2_9_0
fuse_2_9_1
fuse_2_9_2
fuse_2_9_3
fuse_2_9_start
fuse_3_0_start
start
fuse-3.*
fuse-3.0.0
fuse-3.0.0pre0
fuse-3.0.0rc1
fuse-3.0.0rc2
fuse-3.0.0rc3
fuse-3.0.1
fuse-3.0.2
fuse-3.1.0
fuse-3.1.1
fuse-3.2.0
fuse-3.2.1
fuse-3.2.2
fuse-3.2.3
fuse-3.2.4
fuse-3.2.5
fuse-3.2.6
fuse-3.3.0
fuse-3.4.2
fuse-3.5.0
release-3.*
release-3.5.3
release-3.5.3-rc0
release-3.5.3-rc1

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.16.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "1.0.0"
            },
            {
                "last_affected": "3.4.13"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.5.0-alpha"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.5.1-alpha"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.5.2-alpha"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.5.3-beta"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.5.4-beta"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "19.1.0.0.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "18.1.3.1.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0201.json"