CVE-2012-1574 in Hadoop

Riassunto

di MITRE

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 12/03/2012
• Divulgazione: 12/04/2012
• Moderazione: accettato
• Voce: VDB-5032
• CPE: pronto
• CWE: CWE-310 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.5 (VulDB)
• EPSS: 0.04827
• KEV: no
• Attività: molto basso
• Settore: Insurance, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1574
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1574
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1574/