The vulnerability of the Apache Hadoop distributed development and execution platform, related to access control deficiencies, allows a hacker to elevate their privileges to the root level and execute arbitrary code.

Apache Hadoop vulnerability due to access control flaws allows privilege escalation to root and arbitrary code execution.

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Hadoop affect IBM watsonx.data	18 Sep 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop	17 May 202321:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	22 Jun 202215:20	–	ibm
CVE	CVE-2018-8029	30 May 201915:15	–	cve
Cvelist	CVE-2018-8029	30 May 201915:15	–	cvelist
EUVD	EUVD-2019-0447	7 Oct 202500:30	–	euvd
Github Security Blog	Privilege escalation vulnerability in Apache Hadoop	31 May 201916:09	–	github
NCSC	Vulnerabilities fixed in IBM Cognos	23 Jun 202200:00	–	ncsc
NVD	CVE-2018-8029	30 May 201916:29	–	nvd

Vulners

Node

apache hadoopRange3.0.0-alpha1–3.1.0

apache hadoopRange2.9.0–2.9.1

apache hadoopRange2.2.0–2.8.4

Source	Link
securitylab	www.securitylab.ru/vulnerability/499378.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8029
securityfocus	www.securityfocus.com/bid/108518
security	www.security.netapp.com/advisory/ntap-20190617-0001/
nvd	www.nvd.nist.gov/vuln/detail

23 Dec 2019 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 38.8

CVSS 29

EPSS0.01381