Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xr4q-6qfj-q54q

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or (2) an import of a certain Hive table definition with the HCAT_SYNC_OBJECTS procedure.

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or (2) an import of a certain Hive table definition with the HCAT_SYNC_OBJECTS procedure.

EPSS

Процентиль: 47%
0.00237
Низкий

Дефекты

CWE-89

Связанные уязвимости

nvd
почти 11 лет назад

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or (2) an import of a certain Hive table definition with the HCAT_SYNC_OBJECTS procedure.

EPSS

Процентиль: 47%
0.00237
Низкий

Дефекты

CWE-89