Описание
The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:apache:hadoop:0.20.203.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.20.204.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.20.205.0:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:apache:hadoop:0.23.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:1.0.1:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:cloudera:cloudera_cdh:cdh3:0:*:*:*:*:*:*
cpe:2.3:a:cloudera:cloudera_cdh:cdh3:1:*:*:*:*:*:*
cpe:2.3:a:cloudera:cloudera_cdh:cdh3:2:*:*:*:*:*:*
cpe:2.3:a:cloudera:hadoop:0.20-sbin:*:*:*:*:*:*:*
cpe:2.3:a:cloudera:hadoop:0.20.1\+169:*:*:*:*:*:*:*
cpe:2.3:a:cloudera:hadoop:0.20.2\+923:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00293
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-310
Связанные уязвимости
debian
почти 14 лет назад
The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.20 ...
github
больше 3 лет назад
Apache Hadoop allows impersonation of arbitrary cluster user accounts
EPSS
Процентиль: 52%
0.00293
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-310