critical9.8
CVE-2016-3086
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to …
Impact
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Hadoop | Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
- http://www.securityfocus.com/bid/95335
- http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
- http://www.securityfocus.com/bid/95335