Unscored CVE-2018-11785 EUVD-2018-3787GHSA-4jv4-cqp4-66cr

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into …

Published Oct 24, 2018 · Updated Sep 16, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Impala

Description

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Impala	Apache Impala 3.0.0	—

References

105742 vdb-entry
https://lists.apache.org/thread.html/cba8f18df15af862aa07c584d8dc85c44a199fb8f460edd498059247%40%3Cdev.impala.apache.org%3E