CVE-2017-15713

🗓️ 19 Jan 2018 17:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 111 Views

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files

Reporter	Title	Published	Views	Family All 23
0day.today	Apache Hadoop 0.23.x Private File Disclosure Vulnerability	23 Jan 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to information disclosure due to its use of Apache Hadoop (CVE-2017-15713)	21 Jul 202212:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Hadoop affect IBM watsonx.data	18 Sep 202419:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Hadoop affect Apache Solr shipped with IBM Operations Analytics - Log Analysis	19 Apr 202108:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop	17 May 202321:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	22 Jun 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerability	13 Dec 201814:45	–	ibm
IBM Security Bulletins	Log Analysis Security Bulletin List	1 Sep 202111:04	–	ibm
CNVD	Apache Hadoop Information Disclosure Vulnerability (CNVD-2018-03273)	22 Jan 201800:00	–	cnvd

NVD

Vulners

Node

apache hadoopRange0.23.0–0.23.11

apache hadoopRange2.2.0–2.8.2

apache hadoopMatch2.0.0alpha

apache hadoopMatch2.0.1alpha

apache hadoopMatch2.0.2alpha

apache hadoopMatch2.0.3alpha

apache hadoopMatch2.0.4alpha

apache hadoopMatch2.0.5alpha

apache hadoopMatch2.0.6alpha

apache hadoopMatch2.1.0beta

apache hadoopMatch2.1.1beta

apache hadoopMatch3.0.0alpha1

apache hadoopMatch3.0.0alpha2

apache hadoopMatch3.0.0alpha3

apache hadoopMatch3.0.0alpha4

apache hadoopMatch3.0.0beta1

[
  {
    "product": "Apache Hadoop",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "0.23.0 to 0.23.11"
      },
      {
        "status": "affected",
        "version": "2.0.0-alpha to 2.8.2"
      },
      {
        "status": "affected",
        "version": "3.0.0-alpha to 3.0.0-beta1"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91%40%3Cgeneral.hadoop.apache.org%3E

21 Nov 2024 03:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24

CVSS 36.5

EPSS0.00191

CWE-200