Archive
30 August 2017
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 5.5
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random…