6.5

CVE-2012-1574

EPSS 0.29%
Veröffentlicht 12.04.2012 10:45:14
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Hadoop Version0.20.203.0

Apache ≫ Hadoop Version0.20.204.0

Apache ≫ Hadoop Version0.20.205.0

Apache ≫ Hadoop Version0.23.0

Apache ≫ Hadoop Version0.23.1

Apache ≫ Hadoop Version1.0.0

Apache ≫ Hadoop Version1.0.1

Cloudera ≫ Cloudera Cdh Versioncdh3 Update0

Cloudera ≫ Cloudera Cdh Versioncdh3 Update1

Cloudera ≫ Cloudera Cdh Versioncdh3 Update2

Cloudera ≫ Hadoop Version0.20-sbin

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.29%	0.522

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://archives.neohapsis.com/archives/bugtraq/2012-04/0051.html

http://seclists.org/fulldisclosure/2012/Apr/70

http://secunia.com/advisories/48775

http://secunia.com/advisories/48776

http://www.securityfocus.com/bid/52939

https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin

Vendor Advisory

https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html

https://nvd.nist.gov/vuln/detail/CVE-2012-1574

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-1574

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-1574

EUVD