CVE-2021-28131

CVE-2021-28131 describes a privilege escalation vulnerability in Apache Impala, where session secrets are logged in plain text. An authenticated attacker with access to Impala logs can hijack another user's session by constructing specially crafted requests, potentially executing statements with elevated privileges, especially in deployments using Apache Sentry or Ranger. This vulnerability has a CVSS score of 7.5 (High) due to its high impact on confidentiality, integrity, and availability, though it requires high attack complexity and authenticated access. There is no evidence of active exploitation, public exploit code, or significant community discussion regarding this CVE.