Privilege Escalation Vulnerability in Cloudera Impala by Cloudera
CVE-2016-4572

8.8HIGH

Key Information:

Vendor

Cloudera

Status
Cdh
Vendor
CVE Published:
26 November 2019

What is CVE-2016-4572?

In Cloudera CDH versions prior to 5.7.1, a flaw exists within the Impala REVOKE ALL ON SERVER commands, which do not adequately revoke all privileges from users. This could potentially allow unauthorized users to maintain access to data or functionalities that should have been restricted, leading to significant security risks. Organizations utilizing affected versions are strongly encouraged to update to the latest release to mitigate this issue.

References

https://docs.cloudera.com/documentation/other/security-bu...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.