CVE-2018-8028

Summary (CVE-2018-8028) : An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without authorization in Apache Sentry prior to version 2.0.1, potentially exposing and removing data from a Sentry-protected partitioned table. The issue is tied to insufficient access control around part...

CVE-2016-0760

CVE-2016-0760 pertains to Apache Sentry prior to 1.7.0, where multiple incomplete blacklist checks allow remote authenticated users to execute arbitrary code through the Hive builtin functions reflect, reflect2, and java_method. The linked records (NVD, OSV, CNVD, CVE lists) consistently describe...