Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 4

Количество 4

redhat логотип

CVE-2014-3627

почти 12 лет назад

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.

CVSS2: 6.4
EPSS: Низкий
nvd логотип

CVE-2014-3627

почти 12 лет назад

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-jpmf-8cj2-595g

больше 4 лет назад

Improper Link Resolution Before File Access in Apache Hadoop

EPSS: Низкий
altlinux логотип

ALT-PU-2017-3659

около 9 лет назад

ALT-PU-2017-3659: package `hadoop` update to version 2.7.3-alt1_2jpp8

CVSS3: 7.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2014-3627

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.

CVSS2: 6.4
3%
Низкий
почти 12 лет назад
nvd логотип
CVE-2014-3627

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache.

CVSS2: 5
3%
Низкий
почти 12 лет назад
github логотип
GHSA-jpmf-8cj2-595g

Improper Link Resolution Before File Access in Apache Hadoop

3%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2017-3659

ALT-PU-2017-3659: package `hadoop` update to version 2.7.3-alt1_2jpp8

CVSS3: 7.3
около 9 лет назад

Уязвимостей на страницу