Apache Software Foundation Impala vulnerabilities

1 known vulnerability affecting apache_software_foundation/impala.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-10084HIGHCVSS 7.5v2.7.0 to 3.2.02019-11-05

CVE-2019-10084 [HIGH] CWE-311 CVE-2019-10084: In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queri In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and thereby potentially bypass authorization and audit mechanisms. Session and query IDs are unique and random, but have not been documented or consistently t