CGA-2vg4-9xj6-92w3

Published

Last updated

Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update

Fix not planned

Aliases

Severity

Unknown

Insecure Inherited Permissions in Apache Hadoop

In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.