You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "lujie (Jira)" <ji...@apache.org> on 2020/12/18 05:02:00 UTC

[jira] [Created] (HBASE-25407) list_regions make potential sensitive information disclosure

lujie created HBASE-25407:
-----------------------------

             Summary: list_regions make potential sensitive information disclosure
                 Key: HBASE-25407
                 URL: https://issues.apache.org/jira/browse/HBASE-25407
             Project: HBase
          Issue Type: Bug
            Reporter: lujie
         Attachments: image-2020-12-18-13-00-20-126.png

I found that I can get other users' region information which is not expected.
 
For example i create a table as sysadmin, then I can read the region information as user1.
!image-2020-12-18-13-00-20-126.png!
 
I have found that list_regions is introduced by https://issues.apache.org/jira/browse/HBASE-14925



--
This message was sent by Atlassian Jira
(v8.3.4#803005)