Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2022/05/13 1:53 a.m.•52 views

GHSA-6XHJ-P29V-82J8 Apache Sentry may allow attacker to access/remove data from Sentry protected table

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS8.6AI score0.0131EPSS
SaveExploits0References3
Veracode
Veracode
•added 2019/07/08 10:49 a.m.•28 views

Unauthorized Modification

Apache Sentry is vulnerable to unauthorized modification attacks. An unauthorized user could execute ALTER TABLE EXCHANGE PARTITIONS which may allow an attacker to access unauthorized partitioned data of a Sentry protected table and to remove data from a Sentry protected table...

8.8CVSS8.5AI score0.0131EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/08/23 3:29 p.m.•32 views

CVE-2018-8028

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS8.6AI score0.0131EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/08/23 3:29 p.m.•28 views

CVE-2018-8028

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS6.8AI score
SaveExploits0References1
Mend
Mend
•added 2018/08/23 3:00 p.m.•6 views

CVE-2018-8028

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS0.0131EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/23 12:00 a.m.•9 views

CVE-2018-8028: Missing Authorization

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS7.9AI score0.0131EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/08/23 12:00 a.m.•8 views

PT-2018-18393

Name of the Vulnerable Software and Affected Versions: Apache Sentry versions prior to 2.0.1 Description: The issue allows an authenticated user to execute ALTER TABLE EXCHANGE PARTITIONS without proper authorization. This can lead to unauthorized access to partitioned data in a Sentry protected...

8.8CVSS0.0131EPSS
SaveExploits0References5
Rows per page
Query Builder