| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.hadoop:hadoop-common | ≥ 2.6.0, < 2.6.5 | 2.6.5 |
| hadoop | = 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4 |
Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free