Information Exposure Affecting org.apache.hadoop:hadoop-hdfs package, versions [,2.7.4)
Snyk CVSS
Attack Complexity
Low
Confidentiality
High
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGAPACHEHADOOP-32124
- published 21 Mar 2018
- disclosed 11 Apr 2016
- credit kevincox
How to fix?
Upgrade org.apache.hadoop:hadoop-hdfs
to versions 2.7.4 or higher.
Overview
http://hadoop.apache.org/ is the primary distributed storage used by Hadoop applications.
Affected versions of this package are vulnerable to Information Exposure. An attacker may retrive information about paths that they do not have permissions to see.