Apache Software Foundation Apache Hbase vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_hbase.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2018-8025HIGHCVSS 8.1vApache Tomcat 1.x and 2.x, excluding 1.0.02018-06-27

CVE-2018-8025 [HIGH] CWE-362 CVE-2018-8025: CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server whe CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated