Skip to content
OpenAdvisories

Package · Maven

org.apache.hadoop:hadoop-common

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.2
    CVE-2024-23454

    Apache Hadoop: Temporary File Local Information Disclosure

    Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary di…

    Apache Software Foundation Apache Hadoop druid celeborn-0.6 Wolfi Maven
  • Medium 5.5
    CVE-2016-5001

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

    This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random…

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-common Maven
  • Medium 6.5
    CVE-2014-0229

    Improper Authentication in Apache Hadoop

    Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated…

    org.apache.hadoop:hadoop-common Maven
  • Medium 6.2
    CVE-2015-1776

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

    Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive inform…

    org.apache.hadoop:hadoop-common Maven