Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/zookeeper
master @ 12d4cb4
23
Fixes
11
CVEs
CRITICAL
Peak severity
31.8%
Coverage
Highlights
Auth Bypass: 10 prior fixes. Scrutinize any change in this area.
zookeeper-server: most-fixed (9 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: ZooKeeper's IP-based authentication was vulnerable to remote bypass and client spoofing due to unsafe processing of the X-Forwarded-For HTTP header and reliance on reverse DNS lookups, which have since been disabled by default or restricted.
Auth Bypass: Critical failures in ACL validation allowed unauthorized clients to query restricted znodes via the 'exists' command, receive watched event notifications without read permissions, or bypass admin-server commands requiring multiple bitwise permissions.
Auth Bypass: Improper TLS validation and dynamic side-effects in trust manager setups—such as system-wide modification of CRL and OCSP properties or ignoring server-side hostname verification—create critical opportunities for Man-in-the-Middle attacks.