Description

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.

Remediation

References

https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E

Related Vulnerabilities

CVE-2018-1313 Vulnerability in maven package org.apache.derby:derby

CVE-2023-50728 Vulnerability in npm package @octokit/webhooks

CVE-2021-39135 Vulnerability in npm package @npmcli/arborist

CVE-2021-21252 Vulnerability in npm package jquery-validation

CVE-2019-19771 Vulnerability in npm package commanedr

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

NVD-CWE-noinfo