Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29209 State: PUBLISHED Published: 2021-05-25T14:32:49 Last Updated: 2024-08-03T22:02:51.204Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote dom xss, crlf injection Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container
CVE ID: CVE-2021-29210 State: PUBLISHED Published: 2021-05-25T14:11:03 Last Updated: 2024-08-03T22:02:51.297Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote dom xss, crlf injection Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container
CVE ID: CVE-2021-29211 State: PUBLISHED Published: 2021-05-25T14:11:09 Last Updated: 2024-08-03T22:02:51.313Z Vendors: n/a Products: HPE Integrated Lights-Out 4 (iLO 4) For HPE Gen9 servers; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote xss Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/
CVE ID: CVE-2021-29212 State: PUBLISHED Published: 2021-11-01T13:18:43 Last Updated: 2024-08-03T22:02:51.192Z Vendors: n/a Products: iLO Amplifier Pack Problem Types: remote directory traversal Description: A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docI
alyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04189en_us - https://www.zerodayinitiative.com/advisories/ZDI-21-1278/
CVE ID: CVE-2021-29213 State: PUBLISHED Published: 2021-11-01T13:17:32 Last Updated: 2024-08-03T22:02:50.965Z Vendors: n/a Products: HPE ProLiant ML30 Gen10 Server; HPE ProLiant DL20 Gen10 Server; HPE ProLiant MicroServer Gen10 Plus Problem Types: local bypass security restrictions; local compromise of system integrity; local denial of service (DoS); local disclosure of sensitive information Description: A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sen
Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitive information, denial of service (DoS), and/or compromise system integrity. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04197en_us
CVE ID: CVE-2021-29214 State: PUBLISHED Published: 2021-12-10T16:41:37 Last Updated: 2024-08-03T22:02:51.223Z Vendors: n/a Products: HPE StoreServ Management Console (SSMC); HPE 3PAR StoreServ Management and Core Software Media Problem Types: remote arbitrary code execution Description: A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1. Additional Analyst Not
are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04207en_us
CVE ID: CVE-2021-29215 State: PUBLISHED Published: 2022-01-18T16:52:33 Last Updated: 2024-08-03T22:02:51.224Z Vendors: n/a Products: HPE Ezmeral Data Fabric Problem Types: remote access restriction bypass Description: A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric. Additiona
software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbez04196en_us
CVE ID: CVE-2021-29216 State: PUBLISHED Published: 2022-02-24T21:04:06 Last Updated: 2024-08-03T22:02:51.176Z Vendors: n/a Products: HPE OneView Global Dashboard Problem Types: remote cross-site scripting Description: A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us
CVE ID: CVE-2021-29217 State: PUBLISHED Published: 2022-02-24T21:04:45 Last Updated: 2024-08-03T22:02:51.677Z Vendors: n/a Products: HPE OneView Global Dashboard Problem Types: remote URL redirection Description: A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us
CVE ID: CVE-2021-29218 State: PUBLISHED Published: 2022-02-04T22:29:15 Last Updated: 2024-08-03T22:02:51.140Z Vendors: n/a Products: HPE Agentless Management Problem Types: local unquoted search path Description: A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows. Additional Analyst Notes: - CVE Program Cont
resolve the vulnerability in HPE Agentless Management Service for Windows. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04233en_us
CVE ID: CVE-2021-29219 State: PUBLISHED Published: 2022-02-04T22:29:15 Last Updated: 2024-08-03T22:02:51.205Z Vendors: n/a Products: HPE FlexNetwork 5130 EI Switch Series Problem Types: local buffer overflow Description: A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02. HPE has made the following software update to resolve the vulnerability in HPE FlexNetwork 5130 EL Switch Series version 5130_EL_7.10.R3507P02. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04234en_us
CVE ID: CVE-2021-29220 State: PUBLISHED Published: 2022-02-24T21:05:28 Last Updated: 2024-08-03T22:02:51.882Z Vendors: n/a Products: iLO Amplifier Pack Problem Types: remote buffer overflow Description: Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remotely execute code that could lead to a loss of confidentiality, integrity, and availability. HPE has provided a software update to resolve this vulnerability in HPE iLO Amplifier Pack. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display
r Pack. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04246en_us
CVE ID: CVE-2021-29221 State: PUBLISHED Published: 2021-04-09T13:34:59 Last Updated: 2024-08-03T22:02:51.425Z Vendors: Erlang Project Products: Erlang/OTP Problem Types: Incorrect Access Control Description: A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute arbitrary code as Local System. This can occur only under specific conditions on Windows with unsafe filesystem permissions. Additional Analyst Notes: - CVE Program Container: References: - http
ons on Windows with unsafe filesystem permissions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erlang/otp/releases/tag/OTP-23.2.3 - https://deepsurface.com/deepsurface-security-advisory-local-privilege-escalation-in-erlang-on-windows-cve-2021-29221/
CVE ID: CVE-2021-29238 State: PUBLISHED Published: 2021-05-03T13:24:01 Last Updated: 2024-08-03T22:02:51.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php - https://www.codesys.com/security/security-reports.html - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14638&token=30b75ee95d0d94527894dfd8cdc5432575a8eff8&download=
CVE ID: CVE-2021-29239 State: PUBLISHED Published: 2021-05-03T13:43:48 Last Updated: 2024-08-03T22:02:51.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php - https://www.codesys.com/security/security-reports.html - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14639&token=fa836f8bd4a2184aa9323a639ca9f2aaf1538412&download=
CVE ID: CVE-2021-29240 State: PUBLISHED Published: 2021-05-04T11:00:38 Last Updated: 2024-08-03T22:02:51.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php - https://www.codesys.com/security/security-reports.html - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14636&token=1ce7e6e4cbe4651989ede418450d7c82e972bdf2&download=
CVE ID: CVE-2021-29241 State: PUBLISHED Published: 2021-05-03T13:17:03 Last Updated: 2024-08-03T22:02:51.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7553ae3be25e22f741db783b31e14799&download= - https://www.codesys.com/security/security-reports.html
CVE ID: CVE-2021-29242 State: PUBLISHED Published: 2021-05-03T13:56:06 Last Updated: 2024-08-03T22:02:51.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php - https://www.codesys.com/security/security-reports.html - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=
CVE ID: CVE-2021-29243 State: PUBLISHED Published: 2021-11-08T12:41:13 Last Updated: 2024-08-03T22:02:51.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html - https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833
CVE ID: CVE-2021-29245 State: PUBLISHED Published: 2021-05-05T12:25:34 Last Updated: 2024-08-03T22:02:51.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29246 State: PUBLISHED Published: 2021-05-05T12:25:43 Last Updated: 2024-08-03T22:02:51.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must craft a malicious plugin file with special characters to upload the file outside of the restricted directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29247 State: PUBLISHED Published: 2021-05-05T12:25:49 Last Updated: 2024-08-03T22:02:51.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29248 State: PUBLISHED Published: 2021-05-05T12:25:55 Last Updated: 2024-08-03T22:02:51.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29249 State: PUBLISHED Published: 2021-03-26T22:20:08 Last Updated: 2024-08-03T22:02:51.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/btcpay-server-1-0-6-0/
CVE ID: CVE-2021-29250 State: PUBLISHED Published: 2021-05-05T12:26:01 Last Updated: 2024-08-03T22:02:51.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality. This enables cookie stealing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29251 State: PUBLISHED Published: 2021-04-01T04:42:18 Last Updated: 2024-08-03T22:02:51.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1 - https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE ID: CVE-2021-29252 State: PUBLISHED Published: 2021-05-26T03:56:19 Last Updated: 2024-08-03T22:02:51.395Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.rsa.com/en-us/company/vulnerability-response-policy - https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-bu
pany/vulnerability-response-policy - https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223
CVE ID: CVE-2021-29253 State: PUBLISHED Published: 2021-05-26T03:57:50 Last Updated: 2024-08-03T22:02:51.222Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AC:H/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use it in further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.rsa.com/en-us/company/vulnerability-response-policy - https://community.rsa.com/t5/archer-product-advis
s: - https://www.rsa.com/en-us/company/vulnerability-response-policy - https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223
CVE ID: CVE-2021-29255 State: PUBLISHED Published: 2021-03-26T17:27:07 Last Updated: 2024-08-03T22:02:51.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials. Additional Analyst Notes: - CVE Program Container: References: - https://blog.microseven.com - https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/
CVE ID: CVE-2021-29256 State: PUBLISHED Published: 2021-05-24T17:56:27.000Z Last Updated: 2025-10-21T23:25:45.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
CVE ID: CVE-2021-29258 State: PUBLISHED Published: 2021-05-20T16:40:46 Last Updated: 2024-08-03T22:02:51.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion. Additional Analyst Notes: - CVE Program Container: References: - https://blog.envoyproxy.io - https://github.com/envoyproxy/envoy-setec/pull/230 - https://github.com/envoyproxy/envoy/releases/tag/v1.14.0 - https://github.com/envoyproxy/envoy/security/advisories/GHSA-xw4q-6pj2-5gfg
CVE ID: CVE-2021-29261 State: PUBLISHED Published: 2021-04-05T06:15:21 Last Updated: 2024-08-03T22:02:51.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.visualstudio.com/items?itemName=svelte.svelte-vscode - https://github.com/sveltejs/language-tools/releases - https://vuln.ryotak.me/advisories/3 - https://github.com/sveltejs/language-tools/releases/tag/extensions-104.8.0 - https://github.com/sveltejs/language-tools/commit/5d7bf1fd98bfe2cd2080
/language-tools/releases/tag/extensions-104.8.0 - https://github.com/sveltejs/language-tools/commit/5d7bf1fd98bfe2cd2080863a3c95ce099b898075
CVE ID: CVE-2021-29262 State: PUBLISHED Published: 2021-04-13T06:35:21 Last Updated: 2024-08-03T22:02:51.423Z Vendors: Apache Software Foundation Products: Apache Solr Problem Types: CWE-522 Description: When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs. Additional Analyst Notes: - CVE Program Container: References: -
present, Solr will not automatically update the ACLs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r536da4c4e4e406f7843461cc754a3d0a3fe575aa576e2b71a9cd57d0%40%3Cannounce.apache.org%3E - https://security.netapp.com/advisory/ntap-20210604-0009/ - https://lists.apache.org/thread.html/r51b29ff62060b67bc9999ded5e252b36b09311fe5a02d27f6de3e4d3%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/r1171f6417eeb6d5e1206d53e2b2ff2d6ee14026f8b595ef7d8a33b79%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/rbc680cbfd745f22d182158217428a296e8e398cde16f3f428fe4bddc%40%3Coak-issues.jackrabbi
https://lists.apache.org/thread.html/rbc680cbfd745f22d182158217428a296e8e398cde16f3f428fe4bddc%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/rb6db683903174eaa44ec80cc118a38574319b0d4181f36b61ee6278f%40%3Cdev.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/r1e92a2eff6c47a65c4a6e95e809a9707181de76f8062403a0bea1012%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/r9c4ce6903218c92ef2583070e64af5a69e483821c4b3016dc41e3c6f%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/rd85f87e559ee27e9c69795e3ad93a77621895e0328ea3df41d711d72%40%3Coak-commits.jackrabbit.apache.org%3E - https://lists.ap