CVE-2018-11792: Critical severity apache impala vulnerability
In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11792?
CVE-2018-11792 is considered a medium-severity vulnerability due to its potential security implications.
How do I fix CVE-2018-11792?
To fix CVE-2018-11792, upgrade to Apache Impala version 3.0.1 or later.
What systems are affected by CVE-2018-11792?
CVE-2018-11792 affects Apache Impala versions prior to 3.0.1.
What is the impact of exploiting CVE-2018-11792?
Exploiting CVE-2018-11792 could allow an unauthorized user to gain elevated privileges on a database.
Are there any workarounds for CVE-2018-11792?
A potential workaround for CVE-2018-11792 is to restrict user permissions to minimize the risk of unauthorized ALTER actions.