CVE-2017-5646

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

CVE-2017-5646

Summary: Apache Knox versions 0.2.0–0.11.0 are vulnerable to an impersonation weakness when accessing WebHDFS, allowing an authenticated user to impersonate another user via a specially crafted URL, potentially enabling escalated privileges and unauthorized data access. The activity is audit logg...

CVE-2017-5646

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...