Cloudera CDH Setry Authorization Bypass Vulnerability

CDH is the most complete, tested and widely deployed distribution of Apache Hadoop.CDH is 100% open source and is the only Hadoop solution that offers batch processing, interactive SQL and interactive search, and enterprise-grade continuous availability. A Setry authorization bypass vulnerability...

Authorization

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization...

CVE-2016-6605

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization...

CVE-2016-6605

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization...

CVE-2016-6605

CVE-2016-6605 affects Cloudera CDH's Impala: versions 5.2.0 through 5.7.2 and 5.8.0 are vulnerable. The root cause is a Setry (likely Sentry) authorization bypass in Impala, enabling remote attackers to bypass access controls. Public documentation in connected sources confirms the affected produc...