| Package | Affected versions | Patched versions |
|---|---|---|
| impala | ≥ 2.7.0, < 4.5.2 | 4.5.2 |
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free