CVE-2018-11785: Medium severity Apache Impala vulnerability
Published Oct 24, 2018
·Updated
Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.
Affected Software
1 affected component
Apache Impala<3.0.1
Event History
Oct 24, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-11785?
CVE-2018-11785 is rated as a moderate severity vulnerability.
2
How do I fix CVE-2018-11785?
To fix CVE-2018-11785, upgrade Apache Impala to version 3.0.1 or later.
3
What impact does CVE-2018-11785 have on Apache Impala?
CVE-2018-11785 allows unauthorized users to inject random data into queries, leading to incorrect query results.
4
Who is affected by CVE-2018-11785?
Apache Impala versions prior to 3.0.1 are affected by CVE-2018-11785.
5
Is CVE-2018-11785 a hardware or software vulnerability?
CVE-2018-11785 is a software vulnerability affecting Apache Impala.