CVE-2020-9492

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without…

published January 26, 2021

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04493 · 91.4th percentile
Published
2021-01-26T12:55Z
EPSS history
Timeline
  • 26 JAN 12:55Z
    In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without…
    cvelistv5