CVE-2017-15712

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process

published February 19, 2018

CVSS
—
EPSS
2%
Percentile
84.6
In the wild
Unconfirmed
What it is

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02496 · 84.6th percentile
Published
2018-02-19T14:00Z
EPSS history
Timeline
  • 19 FEB 14:00Z
    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process
    cvelistv5