CVE-2018-8029

In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands…

published May 30, 2019

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03909 · 90.2th percentile
Published
2019-05-30T15:15Z
EPSS history
Timeline
  • 30 MAY 15:15Z
    In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands…
    cvelistv5