The currently used Apache ZooKeeper version 3.8.3 is affected by a security vulnerability that allows unauthorized disclosure of information.

**CVE-2024-23944:**

• When setting persistent watchers (addWatch command) on a parent ZNode, no ACL check is performed when the watch event is triggered.
• This allows an attacker who already has access to the parent ZNode to view the complete paths of child ZNodes.
• Although no data is exposed, the paths may contain sensitive information such as usernames or login IDs.

To fix this, the ZooKeeper version will be updated to 3.8.4 or 3.9.2, in which this vulnerability has been fixed.