CVE-2017-9792

CVE-2017-9792 affects Apache Impala (incubating) before 2.10.0. A user with ALTER privileges on an Impala table can bypass authorization by turning a non-external Kudu table into external mode and altering the underlying mapping to point at other Kudu tables, potentially accessing data across tab...

CVE-2018-11785

CVE-2018-11785 affects Apache Impala versions prior to 3.0.1 where a missing authorization check allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, resulting in incorrect query results. The connected CNVD/OSV/NVD records corroborate the lack of autho...