CVE-2018-11799

Published: Dec 19, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.

Vendor	Product	Versions
Apache Software Foundation	Apache Oozie	affected `Apache Oozie 3.1.3-incubating to 5.0.0`

References

https://lists.apache.org/thread.html/347e7a8cb86014b7ca37e49eb00b8d088203bdc0bcfb4799f8e5955a%40%3Cuser.oozie.apache.org%3E

x_refsource_MISC

106266

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-11799

Description

Affected Products

References