CVE-2016-6811

HIGH8.8EPSS 0.54%

Insecure Inherited Permissions in Apache Hadoop

Published: 5/14/2022Modified: 11/8/2023

Description

In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (2)