« Volver al listado

CVE-2015-1836

Estado: ModificadaAlta (7.3)—

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Apache — HbaseIBM — Infosphere Biginsights

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1836",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.3,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-12-21T11:59:01.140",
  "references": [
    {
      "url": "http://mail-archives.apache.org/mod_mbox/www-announce/201505.mbox/%3CCA+RK=_CFiTfQ2d0V+kuJx_y5izmYccaKjXaJ3V72KK7tbOhbkg%40mail.gmail.com%3E",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21969546",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034365",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://mail-archives.apache.org/mod_mbox/www-announce/201505.mbox/%3CCA+RK=_CFiTfQ2d0V+kuJx_y5izmYccaKjXaJ3V72KK7tbOhbkg%40mail.gmail.com%3E",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21969546",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034365",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic."
    },
    {
      "lang": "es",
      "value": "Apache HBase 0.98 en versiones anteriores a 0.98.12.1, 1.0 en versiones anteriores a 1.0.1.1 y 1.1 en versiones anteriores a 1.1.0.1, como se utiliza en IBM InfoSphere BigInsights 3.0, 3.0.0.1 y 3.0.0.2 y en otros productos, utiliza de forma incorrecta ACLs para el estado de coordinación de ZooKeeper, lo que permite a atacantes remotos provocar una denegación de servicio (interrupción del demonio), obtener información sensible o modificar datos a través de tráfico de cliente no especificado."
    }
  ],
  "lastModified": "2026-06-17T00:23:05.437",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31342AF9-D73E-4B72-A98D-00E33A7088C1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6771B5C2-7291-4A8F-A558-679768838EAE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_biginsights:3.0.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1875306C-CF9A-423D-9786-B880A5EAD2DB"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A66CE40-F991-48AE-A534-FEF5E3A98260"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF81904A-1E88-40FB-831F-B3A7E0474137"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07CFB1BA-EFBF-47A4-8F58-EEFBCF3ECD74"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB3B53E7-B20C-4829-852E-E8278102440A"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73948924-09F9-4319-BEA4-2428551656A3"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BF5EA17-4864-46F7-AF70-173EE11F6F06"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D7E96A3-E436-42CA-9DB2-B4F2AAD73E0B"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AD63CF2-5603-4F39-BD01-8590935D2417"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D0443EB-35D3-43FC-9DC8-20270946E7E3"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95094683-D1BB-4736-AA82-6D51ABFE1193"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "752C9A6F-59D2-43BA-802C-0B7AC7A2B60D"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "376B0B86-D24C-43CC-81FF-4FA1E6FC37DB"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADCAAC52-62D1-4AAC-B017-B2B305FE556A"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4F3617F-4003-4822-B8B4-9610CAD57F03"
            },
            {
              "criteria": "cpe:2.3:a:apache:hbase:0.98.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7DA60F7E-7EF8-4440-A0CA-B681AF5D44A0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}