GHSA-g48f-ff5h-5f64MediumCVSS 6.2

Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

Published
May 17, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2015-1776 →

📋 Description

Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.

🎯 Affected products1

  • maven/org.apache.hadoop:hadoop-common:>= 2.6.0, <= 2.6.4

🔗 References (3)