CVE:CVE-2019-0201
CNNVD:CNNVD-201905-954
Apache Zookeeper是美国阿帕奇（Apache）软件基金会的一个软件项目，它能够为大型分布式计算提供开源的分布式配置服务、同步服务和命名注册等功能。
Apache ZooKeeper 1.0.0版本至3.4.13版本和3.5.0-alpha版本至3.5.4-beta版本中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
solution:Upgrade apache activemq to a higher version than 5.15.9,and avoid the version 5.15.9; Upgrade apache drill to a higher version than 1.16.0,and avoid the version 1.16.0; Upgrade apache zookeeper to a higher version than 3.4.13,3.5.0,3.5.0:alpha,3.5.0:rc0,3.5.1,3.5.1:alpha,3.5.1:rc0,3.5.1:rc1,3.5.1:rc2,3.5.1:rc3,3.5.1:rc4,3.5.2,3.5.2:alpha,3.5.2:rc0,3.5.2:rc1,3.5.3,3.5.3:beta,3.5.3:rc0,3.5.3:rc1,3.5.4:beta,and avoid the version [1.0.0,3.4.13],3.5.0,3.5.0:alpha,3.5.0:rc0,3.5.1,3.5.1:alpha,3.5.1:rc0,3.5.1:rc1,3.5.1:rc2,3.5.1:rc3,3.5.1:rc4,3.5.2,3.5.2:alpha,3.5.2:rc0,3.5.2:rc1,3.5.3,3.5.3:beta,3.5.3:rc0,3.5.3:rc1,3.5.4:beta; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat fuse to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade oracle goldengate_stream_analytics to a higher version than 19.1.0.0.1,and avoid the version (,19.1.0.0.1); Upgrade oracle siebel_core_-_server_framework to a higher version than 21.5,and avoid the version (,21.5]; Upgrade oracle timesten_in-memory_database to a higher version than 18.1.3.1.0,and avoid the version (,18.1.3.1.0); Upgrade netapp hci_bootstrap_os to a higher version than -; Upgrade netapp element_software to a higher version than -