CVE-2021-33036CWE-24

Apache Hadoop Privilege escalation vulnerability

published June 15, 2022

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03971 · 90.4th percentile
Weakness
CWE-24 · Path Traversal: '../filedir'
Published
2022-06-15T14:25Z
EPSS history
Timeline
  • 15 JUN 14:25Z
    Apache Hadoop Privilege escalation vulnerability
    cvelistv5