Описание
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cloudera:cdh:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cloudera:cdh:5.0.0:beta:*:*:*:*:*:*
cpe:2.3:a:cloudera:cdh:5.0.0:beta2:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:apache:hadoop:0.23.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:0.23.10:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.0:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.1:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.2:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.3:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.4:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.5:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.0.6:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.1.0:beta:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.1.1:beta:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:2.4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.0037
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
EPSS
Процентиль: 58%
0.0037
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-264