56 matches found
Missing Authorization
Overview org.apache.hbase:hbase-thrift is a HBase Thrift Server. Affected versions of this package are vulnerable to Missing Authorization in the REST ScannerInstanceResource and Thrift HBaseServiceHandler scanner handling. An attacker can read rows from, or close, another user’s open scanner by...
CVE-2026-49326
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
EUVD-2026-48610
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
CVE-2026-49326 Apache HBase: Missing scanner instance owner check in thrift delegation service
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
CVE-2026-49326
Apache HBase is vulnerable to a Missing Authorization flaw in its thrift and rest delegation services, specifically within the ScannerInstanceResource and HBaseServiceHandler components. The root cause is the failure to verify that a user owns a scanner instance during fetch or close operations a...
PT-2026-64312
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetchpossible multiple times, close. The open step will return an id which will be passed back to server for identifying the scanner instances stored ...
EUVD-2018-0678
Malware in sbrugna...
EUVD-2013-2148
Malware in sbrugna...
EUVD-2018-0650
Malware in sbrugna...
EUVD-2019-0402
Malware in sbrugna...
Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15
Summary IBM has released the below fix for IBM DataStage on Cloud Pak for Data in response to multiple vulnerabilities found in components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2015-5237 DESCRIPTION: Google Protocol Buffers cou...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to denial of service due to hbase-client
Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to LDAP injection due to hbase-client
Summary hbase-client is used by the ds-cas-lite microservice as part of the HBase API functionality. Vulnerability Details CVEID:CVE-2023-25613 DESCRIPTION: Apache Kerby could allow a remote attacker to conduct an LDAP injection, caused by a flaw in LdapIdentityBackend. By sending a request with ...
Apache Storm remote code execution vulnerability
The UI daemon in Apache Storm 0.10.0-beta allows remote users to run arbitrary code as the user running the web server. With kerberos authentication this could allow impersonation of arbitrary users on other systems, including HDFS and HBase...
GHSA-CG5H-Q983-4RWW Apache Storm remote code execution vulnerability
The UI daemon in Apache Storm 0.10.0-beta allows remote users to run arbitrary code as the user running the web server. With kerberos authentication this could allow impersonation of arbitrary users on other systems, including HDFS and HBase...
Unauthorized Access Vulnerability in Apache HBase
Apache Hbase is the United States Apache Apache Software Foundation, a set of column-oriented distributed database built on Apache Hadoop and Apache ZooKeeper. An unauthorized access vulnerability exists in Apache HBase. An attacker could exploit the vulnerability to obtain sensitive information...
Security Bulletin: Infosphere BigInsights is affected by vulnerabilities in Apache HBase and Hive that could allow a remote attacker to gain unauthorized access to the system or authenticate with improper credentials (CVE-2015-1772, CVE-2015-1836).
Summary Infosphere BigInsights is affected by vulnerabilities in Apache HBase and Hive that could allow a remote attacker to gain unauthorized access to the system or authenticate with improper credentials CVE-2015-1772 , CVE-2015-1836. Vulnerability Details CVEID: CVE-2015-1772 DESCRIPTION: Apac...
apache-hbase.679495.n3.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181880 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...