Improper Privilege Management

org.apache.hadoop,hadoop-common is vulnerable to Improper Privilege Managements. The vulnerability is due to the RunJar.run method not setting permissions for the temporary directory by default, which allows other local users to view sensitive data stored in that directory...

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...