Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Sentry
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-8028 1 Apache 1 Sentry 2023-12-10 6.5 MEDIUM 8.8 HIGH
An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table.
CVE-2016-0760 1 Apache 1 Sentry 2023-12-10 6.5 MEDIUM 8.8 HIGH
Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3) java_method Hive builtin functions.