From 4501f4d86d3ef628313e78b345dc6a7bf6cb8890 Mon Sep 17 00:00:00 2001 From: Andreas Hunkeler Date: Wed, 30 Jun 2021 13:31:08 +0200 Subject: [PATCH] Fix small typo in security changelog --- docs/en/whats-new/security-changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/whats-new/security-changelog.md b/docs/en/whats-new/security-changelog.md index aecd7a26508..bebc9a6035f 100644 --- a/docs/en/whats-new/security-changelog.md +++ b/docs/en/whats-new/security-changelog.md @@ -7,7 +7,7 @@ toc_title: Security Changelog ### CVE-2019-15024 {#cve-2019-15024} -Аn attacker that has write access to ZooKeeper and who ican run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem. +Аn attacker that has write access to ZooKeeper and who can run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem. Credits: Eldar Zaitov of Yandex Information Security Team