CVE-2016-3086 | BDVDB-2026-89913 Detail

ApacheApache Hadoop

Description#

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/95335
http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E

Exploit#

No public exploit known

History#

Version 12017-09-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.