Apache Sentry vulnerabilities

2 CVEs affecting Apache Sentry, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-8028, published 2018-08-23.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0760, published 2016-08-19. High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3) java_method Hive…
• CVE-2018-8028, published 2018-08-23. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a…