1 result · Clear filters · Feed
-
Medium 6.5
Apache HBase: Missing scanner instance owner check in thrift delegation service
Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close. The open step will return an id which will be passed back to server for i…