CVE-2017-3162

published 2017-04-26

CVE-2017-3162: HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in…

high 7.3 CVSS 3.0

AV N AC L PR N UI N S U C L I L A L

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	hadoop	<= 2.6.5	—
apache_software_foundation	apache_hadoop	—	—

CWE-20