Fabian Fleischer

Improper Authentication allows an unauthenticated user to access system cleanup actions. This issue primarily impacts services directly exposed to the public network, while in-house deployments are generally not affected.

An authenticated user with low privileges and no system permissions can issue a remote command to gracefully shut down system components, including the compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver. This action results in a denial of service.