Information Disclosure

🗓️ 25 Jan 2018 05:14:52Reported by Veracode Vulnerability DatabaseType

Hadoop YARN NodeManager password leakage vulnerabilit

Reporter	Title	Published	Views	Family All 32
0day.today	Apache Hadoop YARN NodeManager Password Leak Vulnerability	25 Jan 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Data Platform 7.1.9 HF2	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop	17 May 202321:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	22 Jun 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere BigInsights 4.2 is affected by Open Source vulnerabilities in Hadoop (CVE-2016-3086, CVE-2016-5001) and Solr (CVE-2017-3163)	18 Jul 202023:17	–	ibm
BDU FSTEC	The vulnerability of the YARN NodeManager component in Apache Hadoop’s distributed development and execution platform allows a hacker to gain unauthorized access to arbitrary passwords.	7 Sep 202300:00	–	bdu_fstec
CNVD	Apache Hadoop Information Disclosure Vulnerability (CNVD-2017-00448)	12 Jan 201700:00	–	cnvd
CNVD	Apache Hadoop YARN NodeManager Password Disclosure Vulnerability	25 Jan 201800:00	–	cnvd
CVE	CVE-2016-3086	5 Sep 201713:00	–	cve
CVE	CVE-2017-15718	24 Jan 201814:00	–	cve

Vulners

Node

apache hadoop-commonRange2.6.0–2.7.4java

Source	Link
github	www.github.com/apache/hadoop/commit/bfa736b7782b0075b3dc4c956ae7426952c49f83
lists	www.lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6@%3Cgeneral.hadoop.apache.org%3E
lists	www.lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E

08 Nov 2023 00:42Current

9.3High risk

Vulners AI Score9.3

CVSS 25

CVSS 39.8

EPSS0.0362