CVE-2021-29215: HPE Tez
Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.
A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric.
Affected products
- HPE Tez: from 0.8, up to and including 0.8.201907081100-1.noarch; from 0.9, before 0.9.201907090334-1.noarch (fixed in 0.9.201907090334-1.noarch); from 0.9.2, up to and including 0.9.2.0.201907081043-1.noarch
Published 2022-01-18. Last modified 2026-06-17.