GitHub Advisoryadvisory · Maven
GHSA-mf7c-35mq-75pj Insecure Inherited Permissions in Apache Hadoop
HIGH
Official page ↗
- Aliases
- CVE-2016-6811
- Ecosystem
- Maven
- Packages
- org.apache.hadoop:hadoop-common
- Severity
- High
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-277
- Reviewed
- 2022-07-06
Affected packages
• Maven org.apache.hadoop:hadoop-common: >= 2.0.0-alpha, < 2.7.4 → fixed in 2.7.4
Description
In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.
Related
Alias · CVE (1)
- CVE-2016-6811 In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. vulnerability
Weakness · CWE (1)
- CWE-277 Insecure Inherited Permissions weakness