CVE-2018-11764

Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0

published October 21, 2020

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02394 · 83.9th percentile
Published
2020-10-21T18:13Z
EPSS history
Timeline
  • 21 OCT 18:13Z
    Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0
    cvelistv5