CVE-2017-15718

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-15718

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15718.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2017-15718

Aliases

GHSA-mq8p-h798-xcrp

Published

2018-01-24T14:29:00Z

Modified

2024-10-12T02:38:21.952203Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.

References

https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E

Affected packages

Git / github.com/apache/hadoop

Affected ranges

Type: GIT
Repo: https://github.com/apache/hadoop
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

baa91f7c6bc9cb92be5982de4719c1c8af91ccff

Last affected

cd915e1e8d9d0131462a0b7301586c175728a282

Affected versions

rel/release-2.*

rel/release-2.7.3

rel/release-2.7.4

release-2.*

release-2.7.3-RC0

release-2.7.3-RC1

release-2.7.3-RC2

release-2.7.4-RC0