Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Hadoop

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-25642 Public exploit

    Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler

    ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users sho…

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-yarn-server Maven