Skip to content
OpenAdvisories

Package · Maven

org.apache.hbase:hbase

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2019-0212

    Improper Authorization in org.apache.hbase:hbase

    In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not …

    Apache Apache HBase org.apache.hbase:hbase Maven
  • High 7.3
    CVE-2015-1836

    High severity vulnerability that affects org.apache.hbase:hbase

    Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a …

    org.apache.hbase:hbase Maven