CVE-2017-7669

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:hadoop:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:3.0.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-05 01:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-7669

Mitre link : CVE-2017-7669

CVE.ORG link : CVE-2017-7669


JSON object : View

Products Affected

apache

  • hadoop
CWE
CWE-20

Improper Input Validation