PT-2021-12856 · Apache · Apache Hadoop

🗓️ 26 Jan 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

The WebHDFS client in Apache Hadoop may send an authorization header to a remote destination.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities found in Cloudera Data Platform Private Cloud base with IBM	2 Mar 202614:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	27 Apr 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Hadoop affects watsonx.data	5 Sep 202418:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spark affecting IBM QRadar User Behavior Analytics	18 Oct 202213:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	22 Jun 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in IBM Spectrum Scale could allow an authenticated user to gain elevated privileges (CVE-2020-9492)	19 Jul 202111:45	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/BIT-solr-2020-9492
osv	www.osv.dev/vulnerability/CVE-2020-9492
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.apache.org/thread.html/r513758942356ccd0d14538ba18a09903fc72716d74be1cb727ea91ff%40%3Cgeneral.hadoop.apache.org%3E
osv	www.osv.dev/vulnerability/GHSA-f8vc-wfc8-hxqh
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-9492
github	www.github.com/apache/hadoop
github	www.github.com/apache/hadoop/commit/ca65409836d2949e9a9408d40bec0177b414cd5d
lists	www.lists.apache.org/thread.html/rb12afaa421d483863c4175e42e5dbd0673917a3cff73f3fca4f8275f@%3Cissues.solr.apache.org%3E
lists	www.lists.apache.org/thread.html/rc0057ebf32b646ab47f7f5744a8948332e015c39044cbb9d87ea76cd@%3Ccommits.druid.apache.org%3E

06 Mar 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.8

CVSS 26.5

EPSS0.0011

webhdfs client apache hadoop authorization header remote destination version ranges