title: Oozie local privilege escalation
description: There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.
problem types: CWE-377 Insecure Temporary File
affected:
{
product: Apache Oozie
vendor: Apache Software Foundation
versions:
lessThan: 5.2.1, status: affected, version: unspecified, versionType: custom
}
workarounds: Validate the contents of the sharelib after uploading.