En resumen
- CVE-2017-15718 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a org.apache.hadoop:hadoop-main, hadoop (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.6%, mayor que el 89.4% de las vulnerabilidades.
- Solución: actualizar a 2.7.5 o posterior.
Description
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.
NVD description
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.
Más vulnerabilidades de org.apache.hadoop:hadoop-main
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free