En resumen
- CVE-2018-11766 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a org.apache.hadoop:hadoop-main, hadoop (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.2%, mayor que el 88.3% de las vulnerabilidades.
- Solución: actualizar a 2.7.7 o posterior.
Description
In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.
NVD description
In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.
Más vulnerabilidades de org.apache.hadoop:hadoop-main
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free