CVEvulnerability

CVE-2018-11767

7.4 HIGH Published 2019-03-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
Weaknesses
CWE-269

Description

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.

Affected configurations

• apache hadoop (>= 2.7.5 <= 2.7.6) • apache hadoop (>= 2.8.3 <= 2.8.4) • apache hadoop (>= 2.9.0 <= 2.9.1)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References