CVE-2018-8025

CVE-2018-8025 describes a race condition in the Apache HBase optional Thrift 1 API server over HTTP where authenticated sessions could be incorrectly applied to users. The issue affects the Thrift 1 endpoint and can cause session misassignment (e.g., a user becoming another user or an unauthentic...