6 matches found
org.apache.knox:gateway-provider-identity-assertion-concat (>=0.6.0, <=0.11.0), org.apache.knox:gateway-provider-identity-assertion-hadoop-groups (0.11.0) +4 more potentially affected by CVE-2017-5646 via org.apache.knox:gateway-provider-identity-assertion-common (>=0.6.0, <=0.11.0)
org.apache.knox:gateway-provider-identity-assertion-common MAVEN version =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.9.0, =0.6.0, =0.7.0 Source cves: CVE-2017-5646 Source advisory: OSV:GHSA-G3FC-8JV4-QMMV...
org.apache.knox:gateway-provider-identity-assertion-concat (>=0.6.0, <=0.11.0), org.apache.knox:gateway-provider-identity-assertion-hadoop-groups (0.11.0) +4 more potentially affected by CVE-2017-5646 via org.apache.knox:gateway-provider-identity-assertion-common (>=0.6.0, <=0.11.0)
org.apache.knox:gateway-provider-identity-assertion-common MAVEN version =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.9.0, =0.6.0, =0.7.0 Source cves: CVE-2017-5646 Source advisory: GHSA-G3FC-8JV4-QMMV...
CVE-2017-5646
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...
CVE-2017-5646
Summary: Apache Knox versions 0.2.0–0.11.0 are vulnerable to an impersonation weakness when accessing WebHDFS, allowing an authenticated user to impersonate another user via a specially crafted URL, potentially enabling escalated privileges and unauthorized data access. The activity is audit logg...
org.apache.knox:gateway-provider-identity-assertion-concat (>=0.6.0, <=0.11.0), org.apache.knox:gateway-provider-identity-assertion-hadoop-groups (0.11.0) +4 more potentially affected by CVE-2017-5646 via org.apache.knox:gateway-provider-identity-assertion-common (>=0.6.0, <=0.11.0)
org.apache.knox:gateway-provider-identity-assertion-common MAVEN version =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.9.0, =0.6.0, =0.7.0 Source cves: CVE-2017-5646 Source advisory: MEND:CVE-2017-5646...
CVE-2017-5646
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...