Apache Oozie has an improper input validation vulnerability that allows an authenticated user to reconfigure another tenant's workflow job and change its ownership. This affects all versions of Apache Oozie. The project is retired and no fix will be released. Users should restrict access to trusted users or find an alternative solution.