Description
Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
An authenticated, but low-privileged user without system permissions may
issue a remote command to gracefully shutdown system components
(compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver),
leading to a denial of service.
This issue affects Apache Accumulo 2.1.4 and 2.1.5.
Users are recommended to upgrade to version 2.1.6, which fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Accumulo | 2.1.4 – ≤ 2.1.5 | — |
References
- https://github.com/apache/accumulo/issues/6478 issue-tracking
- https://accumulo.apache.org/release/accumulo-2.1.6/ release-notes vendor-advisory
- https://accumulo.apache.org/downloads/ product patch
- https://lists.apache.org/thread/qclg736k93oqn4qrpw9wxjbb3jhn6gm1 vendor-advisory