CVE-2015-1836

Published: Dec 21, 2015Modified: May 6, 2026

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.

Affected (18)

Products: Ibm: Infosphere Biginsights · Apache: Hbase

Ibm

1 product

Infosphere Biginsights

Apache

1 product

Hbase

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Biginsights	Version 3.0.0.0
Ibm Infosphere Biginsights	Version 3.0.0.1
Ibm Infosphere Biginsights	Version 3.0.0.2

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Apache Hbase	Version 0.98.0
Apache Hbase	Version 0.98.10.1
Apache Hbase	Version 0.98.10
Apache Hbase	Version 0.98.11
Apache Hbase	Version 0.98.12
Apache Hbase	Version 0.98.1
Apache Hbase	Version 0.98.2
Apache Hbase	Version 0.98.3
Apache Hbase	Version 0.98.4
Apache Hbase	Version 0.98.5
Apache Hbase	Version 0.98.6.1
Apache Hbase	Version 0.98.6
Apache Hbase	Version 0.98.7
Apache Hbase	Version 0.98.8
Apache Hbase	Version 0.98.9