Missing Authorization

Overview org.apache.hbase:hbase-thrift is a HBase Thrift Server. Affected versions of this package are vulnerable to Missing Authorization in the REST ScannerInstanceResource and Thrift HBaseServiceHandler scanner handling. An attacker can read rows from, or close, another user’s open scanner by...

EUVD-2018-0678

Malware in sbrugna...

GHSA-R86J-2GC6-2CQ9 Race condition in org.apache.hbase:hbase-thrift

An issue in Apache HBase affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be...

Authorization Bypass

hbase-thrift is vulnerable to authorization bypasses. The library contains a race-condition where authenticated sessions could get mixed up and cause users to be authenticated as another user. This only affects the optional Thrift 1 API server...