CVE-2018-11799

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users

published December 19, 2018

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01484 · 73.8th percentile
Published
2018-12-19T20:00Z
EPSS history
Timeline
  • 19 DEC 20:00Z
    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users
    cvelistv5