Threats Tagged 'ghsa-3mmv-f538-2fpw'

1 threat

Threats Tagged 'ghsa-3mmv-f538-2fpw'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-56207Apache Impala · Improper Verification of Cryptographic Signature Critical9.8EPSS 0.5%2026-09-09CVE Database V5CVE-2026-56207 CVE-2026-56207 is a critical vulnerability in Apache Impala versions 4.0.0 through 4.5.1 where the signature of the Bearer token is not verified in the final step of SAML2 authentication for the hs2-http interface. This flaw allows an attacker to alter the user name and impersonate another user. The issue is fixed in version 4.5.2. EPSS 0.5%Vulnerability Apache Software Foundation #cwe-347 #ghsa-3mmv-f538-2fpw	CVE Database V5	2026-09-09

Showing 1–1 of 1 result