CVE-2016-6811

In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-04-11

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Hadoop (Apache)

References

• https://lists.apache.org/thread.html/9ba3c12bbdfd5b2cae60909e48f92608e00c8d99196390b8cfeca307%40%3Cgeneral.hadoop.apach…