Skip to content
OpenAdvisories

Package · Maven

org.apache.hadoop:hadoop-main

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2017-15713

    Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

    Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct…

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-main Maven
  • Medium —
    CVE-2012-1574

    Apache Hadoop allows impersonation of arbitrary cluster user accounts

    The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, all…

    org.apache.hadoop:hadoop-main Maven