org.apache.sentry/sentry vulnerabilities

Latest org.apache.sentry/sentry CVEs

Newest publication first

1. CVE-2018-8028 Apache Sentry may allow attacker to access/remove data from Sentry protected table

   Published 2018-08-23

   High·CVSS 8.8 EPSS 1.3%

   An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry prot...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.