~ / search / GHSA-5cf4-jqwp-584g

GHSA-5cf4-jqwp-584g

Improper Privilege Management in org.apache.hadoop:hadoop-main

Source: GitHub Advisory Database (reviewed) High CVE-2018-11767

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.hadoop:hadoop-main >= 2.7.5, < 2.7.7 2.7.7
Maven org.apache.hadoop:hadoop-main >= 2.8.3, < 2.8.5 2.8.5
Maven org.apache.hadoop:hadoop-main >= 2.9.0, < 2.9.2 2.9.2

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.

References

External links from the advisory. They lead to third-party sites.