Vulners
Lucene search
Apache Hadoop DataNode Missed Validation Vulnerability
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Security Bulletin: Security vulnerabilities have been identified in Open Source Apache Hadoop that are dependencies for IBM InfoSphere BigInsights (IBM Open Platform with Apache Hadoop) CVE-2017-3161, CVE-2017-3162 | 18 Jul 202023:29 | – | ibm |
| Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerability | 13 Dec 201814:45 | – | ibm |
 | Apache Hadoop Input Validation Vulnerability | 27 Apr 201700:00 | – | cnvd |
 | CVE-2017-3162 | 26 Apr 201720:00 | – | cve |
 | CVE-2017-3162 | 26 Apr 201720:00 | – | cvelist |
 | EUVD-2022-4816 | 3 Oct 202520:07 | – | euvd |
 | Improper Input Validation in Apache Hadoop | 13 May 202201:08 | – | github |
 | CVE-2017-3162 | 26 Apr 201720:59 | – | nvd |
 | Apache Hadoop Multiple Vulnerabilities | 15 Jun 201700:00 | – | openvas |
 | GHSA-PR9X-QMP5-J3RR Improper Input Validation in Apache Hadoop | 13 May 202201:08 | – | osv |
10
CVE-2017-3162: Apache Hadoop DataNode web UI vulnerability
Severity: Important
Vendor: The Apache Software Foundation
Versions affected: Hadoop 2.6.x and earlier
Description:
HDFS clients interact with a servlet on the DataNode to browse the
HDFS namespace. The NameNode is provided as a query parameter that is
not validated.
Mitigation:
Users of Apache Hadoop 2.6.x and earlier should upgrade to Hadoop
2.7.0 or later.
Credit:
This issue was discovered by Sunil Yadav.
# 0day.today [2018-04-13] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Apr 2017 00:00Current
0.5Low risk
Vulners AI Score0.5
EPSS0.01938