| Package | Affected versions | Patched versions |
|---|---|---|
| hbase | = 0.92.0= 0.92.1= 0.92.2= 0.94.0= 0.94.1= 0.94.2= 0.94.3= 0.94.4= 0.94.5= 0.94.6= 0.94.6.1= 0.94.7= 0.94.8 |
Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free