CVE-2017-15713

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files…

published January 19, 2018

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02210 · 82.3th percentile
Published
2018-01-19T17:00Z
EPSS history
Timeline
  • 19 JAN 17:00Z
    Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files…
    cvelistv5