PT-2021-3851

Name of the Vulnerable Software and Affected Versions Impala versions prior to 4.0 Description The issue is related to Impala sessions using a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, allowing Impala users...

CVE-2019-10084

In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and thereby potentially bypass authorization and audit mechanisms. Session and query IDs are unique an...