CVE-2019-0212

In all previously released Apache HBase 2.x versions 2.0.0-2.0.4, 2.1.0-2.1.3, authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. Th...

CVE-2019-0212

CVE-2019-0212 affects Apache HBase 2.x (versions 2.0.0–2.0.4 and 2.1.0–2.1.3). The vulnerability is in the HBase REST server where authorization was incorrectly applied to REST users; requests were executed with the REST server’s permissions rather than those of the end user. The issue is relevan...