CVE-2016-3086

Опубликовано: 05 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.

Ссылки

http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
Mailing List
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/95335
Third Party Advisory
VDB Entry
http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
Mailing List
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/95335
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:hadoop:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.7.2:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00428

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-3086

CVSS3: 9.8

debian

больше 8 лет назад

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x bef ...

GHSA-895m-ww55-59vw

CVSS3: 9.8

github

больше 3 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

EPSS

Процентиль: 62%

0.00428

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200