Apache Software Foundation HBase 0.92.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:hbase:0.92.0:*:*:*:*:*:*:*

part: a version: 0.92.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductHbase (566bfefe-cad1-562e-ada1-2670cc0ea2e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/hbase purl2cpe 2026-06-01 10:14:26.096356
pkg:github/apache/hbase purl2cpe 2026-06-01 10:14:26.096357
pkg:maven/org.apache.hbase/hbase purl2cpe 2026-06-01 10:14:26.096359

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8025 vulnerable 2026-06-08 05:12:05.014657 Details available
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1.
Published: 2018-06-27T15:00:00.000Z
Updated: 2024-09-16T16:12:44.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2193 vulnerable 2026-06-08 05:03:58.934067 Details available
Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors.
Published: 2014-05-29T14:00:00.000Z
Updated: 2024-08-06T15:27:41.078Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.