CVE-2018-8028

CVE-2018-8028 describes an authorization bypass vulnerability in Apache Sentry versions prior to 2.0.1, where an authenticated user could execute ALTER TABLE EXCHANGE PARTITIONS without proper Sentry authorization. This flaw allows an attacker to gain unauthorized access to, or remove, partitioned data from Sentry-protected tables. The vulnerability carries a CVSS score of 8.8 (HIGH), indicating a high-impact risk with low attack complexity and requiring only low privileges for exploitation, potentially leading to full confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.