GHSA-p8xr-4v2c-rvgpHighCVSS 7.3

High severity vulnerability that affects org.apache.hbase:hbase

Published
October 18, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2015-1836 →

📋 Description

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.

🎯 Affected products3

  • maven/org.apache.hbase:hbase:= 1.1.0
  • maven/org.apache.hbase:hbase:>= 0.98, <= 0.98.12.0
  • maven/org.apache.hbase:hbase:>= 1.0.0, <= 1.0.1.0

🔗 References (6)