apache impala CVE-2018-11785 is a vulnerability in Apache Impala
Published on October 24, 2018

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.

NVD


Products Associated with CVE-2018-11785

Want to know whenever a new CVE is published for Apache Impala? stack.watch will email you.

 

Affected Versions

Apache Software Foundation Apache Impala Version Apache Impala 3.0.0 is affected by CVE-2018-11785

Exploit Probability

EPSS
0.11%
Percentile
29.03%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.