VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 19, 2018· Updated Jun 17, 2026

CVE-2018-11799

CVE-2018-11799

Description

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.oozie:oozie-coreMaven
< 5.1.05.1.0

Affected products

4
  • Apache/Oozie2 versions
    cpe:2.3:a:apache:oozie:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:oozie:*:*:*:*:*:*:*:*range: >=3.1.3,<5.1.0
    • cpe:2.3:a:apache:oozie:3.1.3:incubating:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.apache.oozie/oozie-core
    Range: < 5.1.0
  • Apache Software Foundation/Apache Ooziev5
    Range: Apache Oozie 3.1.3-incubating to 5.0.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.