Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HBase

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Apache HBase: Missing scanner instance owner check in thrift delegation service

    Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close. The open step will return an id which will be passed back to server for i…