GHSA-5cf4-jqwp-584gHighCVSS 7.4

Improper Privilege Management in org.apache.hadoop:hadoop-main

Published
March 25, 2019
Last Modified
January 11, 2023

🔗 CVE IDs covered (1)

CVE-2018-11767 →

📋 Description

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.

🎯 Affected products3

  • maven/org.apache.hadoop:hadoop-main:>= 2.7.5, < 2.7.7
  • maven/org.apache.hadoop:hadoop-main:>= 2.8.3, < 2.8.5
  • maven/org.apache.hadoop:hadoop-main:>= 2.9.0, < 2.9.2

🔗 References (7)