CVE-2016-3086

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@apache.org

Published

2017-09-05

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Hadoop (Apache)
• Apache Hadoop (Apache Software Foundation)

References

• http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.or…
• http://www.securityfocus.com/bid/95335