Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-11792

Опубликовано: 24 окт. 2018
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:apache:impala:*:*:*:*:*:*:*:*
Версия до 3.0.1 (исключая)

EPSS

Процентиль: 67%
0.0055
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database.

EPSS

Процентиль: 67%
0.0055
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-732