Denial of Service and Information Disclosure Vulnerability in Apache HBase by IBM
CVE-2015-1836

7.3HIGH

Key Information:

Vendor: IBM
Status: Infosphere Biginsights
Vendor: CVE Published:; 21 December 2015

What is CVE-2015-1836?

A vulnerability in Apache HBase affects various versions prior to 0.98.12.1, 1.0.1.1, and 1.1.0.1, including IBM's InfoSphere BigInsights. This issue stems from incorrect access control lists (ACLs) used for ZooKeeper coordination state. As a result, unauthorized remote attackers may exploit this vulnerability to achieve a denial of service, access sensitive information, or alter data through unspecified client interactions.