Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-11765
HistorySep 30, 2020 - 6:15 p.m.

Authentication flaw

2020-09-3018:15:00
PRIOn knowledge base
www.prio-n.com
5

0.003 Low

EPSS

Percentile

67.9%

In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through HTTP is not enabled.

References

0.003 Low

EPSS

Percentile

67.9%