Arbitrary Command Execution in Hadoop

🗓️ 21 Dec 2018 17:26:50Reported by GitHub Advisory DatabaseType

Incomplete security fix in Hadoo

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 37
Veracode	Privilege Escalation	28 Nov 201809:37	–	veracode
Veracode	Privilege Escalation	2 May 201807:54	–	veracode
NVD	CVE-2018-11766	27 Nov 201814:29	–	nvd
NVD	CVE-2016-6811	11 Apr 201714:59	–	nvd
OSV	CVE-2018-11766	27 Nov 201814:29	–	osv
OSV	GHSA-RQJ9-CQ6J-958R Arbitrary Command Execution in Hadoop	21 Dec 201817:50	–	osv
OSV	GHSA-MF7C-35MQ-75PJ Insecure Inherited Permissions in Apache Hadoop	14 May 202203:24	–	osv
OSV	CVE-2016-6811	11 Apr 201714:59	–	osv
OpenVAS	Apache Hadoop < 2.7.7 Privilege Escalation Vulnerability	5 Dec 201800:00	–	openvas
OpenVAS	Fedora Update for hadoop FEDORA-2018-f1f44e4c6d	13 Dec 201800:00	–	openvas

Vulners

Node

org.apache.hadoop hadoop-mainRange2.7.4–2.7.6

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-11766
github	www.github.com/advisories/GHSA-rqj9-cq6j-958r
lists	www.lists.apache.org/thread.html/ff37bbbe09d5f03090e2dd2c3dea95de16ef4249e731f19b8959ce4c@%3Cgeneral.hadoop.apache.org%3E
securityfocus	www.securityfocus.com/bid/106035

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Dec 2018 17:50Current

2.4Low risk

Vulners AI Score2.4

CVSS29

CVSS38.8

EPSS0.00729