Apache Hadoop KMS ACL Regression Vulnerability

Apache Hadoop is prone to a KMS ACL regression vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"; if...

GHSA-5CF4-JQWP-584G Improper Privilege Management in org.apache.hadoop:hadoop-main

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...

Improper Privilege Management in org.apache.hadoop:hadoop-main

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...

Default credentials

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...

PT-2019-8794

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions 2.7.5 through 2.7.6 Apache Hadoop versions 2.8.3 through 2.8.4 Apache Hadoop versions 2.9.0 through 2.9.1 Description The issue concerns incorrect user access control in Apache Hadoop, specifically when non-default group...

CVE-2018-11767: Improper Privilege Management

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...