Security Bulletin: IBM InfoSphere BigInsights affected by vulnerability in Big SQL component (CVE-2015-1889)

Summary A security vulnerability has been identified in the Big SQL component of InfoSphere BigInsights that could allow a malicious user to gain unauthorized access to the HDFS data in the cluster. Vulnerability Details CVE-ID: CVE-2015-1889 DESCRIPTION: IBM InfoSphere BigInsights contains an...

CVE-2015-1889

IBM InfoSphere BigInsights Big SQL component (versions 3.0–3.0.0.2) contains an unauthorized HDFS data-access bypass vulnerability. A remote authenticated user can exploit via (1) a crafted CREATE HADOOP TABLE statement referencing another user’s data or (2) importing a Hive table definition with...