[ZOOKEEPER-3977] Vuln Reported - Apache Zookeeper Common/Default Nodes Accessible Without ACL

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Information Provided
• Affects Version/s: 3.4.5
• Component/s: other

Environment

Reported on below operating systems -

1. CentOS
2. Microsoft Windows 2012 R2
3. RHEL 6.10
4. RHEL 7.7
5. RHEL 7.8

• Assignee: Unassigned
• Reporter: NonOS
• Created: 19/Oct/20 10:34
• Updated: 19/Oct/20 14:58
• Resolved: 19/Oct/20 14:58

Description

Vulnerability titled - Apache Zookeeper Common/Default Nodes Accessible Without ACL has been reported on our servers, and recommended solution is to enable ACL on all the nodes.

We need assistance with steps as to how to enable ACL and how to perform application testing after enabling ACL