Apache ZooKeeper: Information disclosure in persistent watcher handling (CVE-2024-23944)
Apache ZooKeeper versions 3.6.0 through before 3.8.4 and 3.9.0 through before 3.9.2 contain an information disclosure vulnerability in the handling of persistent watchers. The issue arises from a missing ACL check when a persistent watcher is triggered, allowing an attacker with access to a parent znode to monitor child znodes and see their full paths. Although the znode data is not exposed, the path information can contain sensitive details such as usernames or login IDs. Upgrading to versions 3.8.4 or 3.9.2 resolves this vulnerability.
AI Analysis
Technical Summary
CVE-2024-23944 is an information disclosure vulnerability in Apache ZooKeeper related to persistent watcher handling. Due to a missing Access Control List (ACL) check when a persistent watcher is triggered, an attacker who can attach a persistent watcher to a parent znode they have access to can observe the full paths of child znodes when watch events occur. This exposure does not include the data stored in the znodes but can reveal sensitive path information. The vulnerability affects versions >=3.6.0 <3.8.4 and >=3.9.0 <3.9.2. The issue is fixed in versions 3.8.4 and 3.9.2.
Potential Impact
An attacker with access to a parent znode can gain knowledge of the full paths of child znodes through persistent watchers without proper ACL enforcement. This can lead to disclosure of sensitive path information such as usernames or login IDs embedded in znode paths. The actual data within the znodes is not exposed. The impact is classified as medium severity.
Mitigation Recommendations
Users should upgrade Apache ZooKeeper to version 3.8.4 or 3.9.2 or later, where this vulnerability is fixed. Applying these official fixes fully mitigates the issue.
Apache ZooKeeper: Information disclosure in persistent watcher handling (CVE-2024-23944)
Description
Apache ZooKeeper versions 3.6.0 through before 3.8.4 and 3.9.0 through before 3.9.2 contain an information disclosure vulnerability in the handling of persistent watchers. The issue arises from a missing ACL check when a persistent watcher is triggered, allowing an attacker with access to a parent znode to monitor child znodes and see their full paths. Although the znode data is not exposed, the path information can contain sensitive details such as usernames or login IDs. Upgrading to versions 3.8.4 or 3.9.2 resolves this vulnerability.
Affected software
pkg:bitnami/zookeeperRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-23944 is an information disclosure vulnerability in Apache ZooKeeper related to persistent watcher handling. Due to a missing Access Control List (ACL) check when a persistent watcher is triggered, an attacker who can attach a persistent watcher to a parent znode they have access to can observe the full paths of child znodes when watch events occur. This exposure does not include the data stored in the znodes but can reveal sensitive path information. The vulnerability affects versions >=3.6.0 <3.8.4 and >=3.9.0 <3.9.2. The issue is fixed in versions 3.8.4 and 3.9.2.
Potential Impact
An attacker with access to a parent znode can gain knowledge of the full paths of child znodes through persistent watchers without proper ACL enforcement. This can lead to disclosure of sensitive path information such as usernames or login IDs embedded in znode paths. The actual data within the znodes is not exposed. The impact is classified as medium severity.
Mitigation Recommendations
Users should upgrade Apache ZooKeeper to version 3.8.4 or 3.9.2 or later, where this vulnerability is fixed. Applying these official fixes fully mitigates the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-zookeeper-2024-23944
- Osv Schema Version
- 1.5.0
- Aliases
- ["CVE-2024-23944"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
Threat ID: 6aa005adacd9273b49ab4bf1
Added to database: 09/08/2026, 12:55:09 UTC
Last enriched: 09/08/2026, 13:06:47 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.