CVE-2018-11785

Published: Oct 24, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.

Vendor	Product	Versions
Apache Software Foundation	Apache Impala	affected `Apache Impala 3.0.0`

References

105742

vdb-entry

x_refsource_BID

https://lists.apache.org/thread.html/cba8f18df15af862aa07c584d8dc85c44a199fb8f460edd498059247%40%3Cdev.impala.apache.org%3E

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-11785

Description

Affected Products

References