CVE-2016-5393

Опубликовано: 29 нояб. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote user who can authenticate with the HDFS NameNode can possibly run arbitrary commands with the same privileges as the HDFS service.

Ссылки

http://mail-archives.apache.org/mod_mbox/hadoop-general/201611.mbox/%3CCAA0W1bTbUmUUSF1rjRpX-2DvWutcrPt7TJSWUcSLg1F0gyHG1Q%40mail.gmail.com%3E
Mailing List
Vendor Advisory
http://www.securityfocus.com/bid/94574
Third Party Advisory
VDB Entry
http://mail-archives.apache.org/mod_mbox/hadoop-general/201611.mbox/%3CCAA0W1bTbUmUUSF1rjRpX-2DvWutcrPt7TJSWUcSLg1F0gyHG1Q%40mail.gmail.com%3E
Mailing List
Vendor Advisory
http://www.securityfocus.com/bid/94574
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:hadoop:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.7.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apache:hadoop:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:hadoop:2.6.4:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02585

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2016-5393

CVSS3: 8.8

debian

около 9 лет назад

In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote u ...

GHSA-7q56-mp4c-gggg

CVSS3: 8.8

github

больше 3 лет назад

Improper Access Control in Apache Hadoop

EPSS

Процентиль: 85%

0.02585

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-284