CVE

Id
79113  
CVE No.
CVE-2015-1836  
Status
Candidate  
Description
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720650 79113 CVE-2015-1836 MLIST:[www-announce] 20150525 CVE-2015-1836: Apache HBase remote denial of service, information integrity, and information disclosure vulnerability  View
720651 79113 CVE-2015-1836 URL:http://mail-archives.apache.org/mod_mbox/www-announce/201505.mbox/%3CCA+RK=_CFiTfQ2d0V+kuJx_y5izmYccaKjXaJ3V72KK7tbOhbkg@mail.gmail.com%3E  View
720652 79113 CVE-2015-1836 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21969546  View
720653 79113 CVE-2015-1836 CONFIRM:https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html  View
720654 79113 CVE-2015-1836 SECTRACK:1034365  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9739 JVNDB-2015-005059 IBM Content Manager などの製品で使用される Content Navigator におけるクロスサイトスクリプティングの脆弱性 IBM Content Manager、FileNet Content Manager、Content Foundation、Content Manager OnDemand およびその他の製品で使用される IBM Content Navigator には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1888 79113 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005059.html  View