org.apache.hbase:hbase-examples (0.96.2-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.96.2-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.96.2-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.96.2-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

org.apache.hbase:hbase-examples (0.96.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.96.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.96.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.96.1-hadoop1 Source cves: CVE-2018-8025 Source advisory:...

com.github.ccweixiao:hbase-sdk-thrift (3.0.0), com.hydraql:hydraql-thrift (>=1.0.1, <=1.0.4) +1 more potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (1.2.0)

org.apache.hbase:hbase-thrift MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - com.github.ccweixiao:hbase-sdk-thrift 3.0.0 - com.hydraql:hydraql-thrift =1.0.1, =1.0.4 -...

Race condition in org.apache.hbase:hbase-thrift

An issue in Apache HBase affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be...

org.apache.hbase:hbase-examples (0.98.16.1-hadoop1) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (0.98.16.1-hadoop1)

org.apache.hbase:hbase-thrift MAVEN version 0.98.16.1-hadoop1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-examples 0.98.16.1-hadoop1 Source cves: CVE-2018-8025 Source...

GHSA-P8XR-4V2C-RVGP High severity vulnerability that affects org.apache.hbase:hbase

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service daemon outage, obtai...

High severity vulnerability that affects org.apache.hbase:hbase

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service daemon outage, obtai...

org.apache.storm:flux-core (>=1.2.0, <=1.2.1), org.apache.storm:storm-elasticsearch-examples (>=1.2.0, <=1.2.1) +14 more potentially affected by CVE-2018-8008 via org.apache.storm:storm-core (>=1.2.0, <=1.2.1)

org.apache.storm:storm-core MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.1 and more Source cves: CVE-2018-8008 Source advisory: OSV:GHSA-898J-5CC8-CMF5...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

Apache HBase Security Restriction Bypass Vulnerability

Apache HBase is the United States Apache Apache Software Foundation, a set of column-oriented distributed database built on Apache Hadoop and Apache ZooKeeper. The database is suitable for unstructured data storage. A security vulnerability exists in Apache Hbase version 1.x and version 2.x. An...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

Race condition

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

CVE-2018-8025

CVE-2018-8025 describes a race condition in the Apache HBase optional Thrift 1 API server over HTTP where authenticated sessions could be incorrectly applied to users. The issue affects the Thrift 1 endpoint and can cause session misassignment (e.g., a user becoming another user or an unauthentic...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

com.github.ccweixiao:hbase-sdk-thrift-core_1.x (>=2.0.7, <=2.0.8), org.apache.hbase:hbase-assembly (>=1.4.0, <=1.4.4) +1 more potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (>=1.4.0, <=1.4.4)

org.apache.hbase:hbase-thrift MAVEN version =1.4.0, =2.0.7, =1.4.0, =1.4.0, =1.4.4 Source cves: CVE-2018-8025 Source advisory: MEND:CVE-2018-8025...

org.apache.hbase:hbase-assembly (2.0.0), org.apache.hbase:hbase-examples (2.0.0) potentially affected by CVE-2018-8025 via org.apache.hbase:hbase-thrift (2.0.0)

org.apache.hbase:hbase-thrift MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hbase:hbase-thrift and may be impacted: - org.apache.hbase:hbase-assembly 2.0.0 - org.apache.hbase:hbase-examples 2.0.0 Source cves:...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

CVE-2018-8025: Concurrent Execution using Shared Resource with Improper Synchronization

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

PT-2018-18390

Name of the Vulnerable Software and Affected Versions: Apache HBase versions prior to 1.2.6.1 Apache HBase versions prior to 1.3.2.1 Apache HBase versions prior to 1.4.5 Apache HBase versions prior to 2.0.1 Description: The issue affects the optional "Thrift 1" API server in Apache HBase when...