Hadoop symlink vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2012-2945 · ADVISORY
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• apache/hadoop · PACKAGE
• seclists.org/fulldisclosure/2012/Jul/3 · WEB
• security-tracker.debian.org/tracker/CVE-2012-2945 · WEB

Lỗ hổng khác của org.apache.hadoop:hadoop-main

• CVE-2018-11764CAO 8.8Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any u…
• CVE-2018-11765CAO 7.5In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication w…
• CVE-2018-11768CAO 7.5In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupte…
• CVE-2018-8029CAO 8.8In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run a…
• CVE-2018-11767CAO 7.4In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system u…