Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-15713

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.4%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2017-15713
  • Apache » Hadoop » Version: 0.23.0
    cpe:2.3:a:apache:hadoop:0.23.0
  • Apache » Hadoop » Version: 0.23.1
    cpe:2.3:a:apache:hadoop:0.23.1
  • Apache » Hadoop » Version: 0.23.10
    cpe:2.3:a:apache:hadoop:0.23.10
  • Apache » Hadoop » Version: 0.23.11
    cpe:2.3:a:apache:hadoop:0.23.11
  • Apache » Hadoop » Version: 0.23.3
    cpe:2.3:a:apache:hadoop:0.23.3
  • Apache » Hadoop » Version: 0.23.4
    cpe:2.3:a:apache:hadoop:0.23.4
  • Apache » Hadoop » Version: 0.23.5
    cpe:2.3:a:apache:hadoop:0.23.5
  • Apache » Hadoop » Version: 0.23.6
    cpe:2.3:a:apache:hadoop:0.23.6
  • Apache » Hadoop » Version: 0.23.7
    cpe:2.3:a:apache:hadoop:0.23.7
  • Apache » Hadoop » Version: 0.23.8
    cpe:2.3:a:apache:hadoop:0.23.8
  • Apache » Hadoop » Version: 0.23.9
    cpe:2.3:a:apache:hadoop:0.23.9
  • Apache » Hadoop » Version: 2.0.0
    cpe:2.3:a:apache:hadoop:2.0.0
  • Apache » Hadoop » Version: 2.0.1
    cpe:2.3:a:apache:hadoop:2.0.1
  • Apache » Hadoop » Version: 2.0.2
    cpe:2.3:a:apache:hadoop:2.0.2
  • Apache » Hadoop » Version: 2.0.3
    cpe:2.3:a:apache:hadoop:2.0.3
  • Apache » Hadoop » Version: 2.0.4
    cpe:2.3:a:apache:hadoop:2.0.4
  • Apache » Hadoop » Version: 2.0.5
    cpe:2.3:a:apache:hadoop:2.0.5
  • Apache » Hadoop » Version: 2.0.6
    cpe:2.3:a:apache:hadoop:2.0.6
  • Apache » Hadoop » Version: 2.1.0
    cpe:2.3:a:apache:hadoop:2.1.0
  • Apache » Hadoop » Version: 2.1.1
    cpe:2.3:a:apache:hadoop:2.1.1
  • Apache » Hadoop » Version: 2.2.0
    cpe:2.3:a:apache:hadoop:2.2.0
  • Apache » Hadoop » Version: 2.3.0
    cpe:2.3:a:apache:hadoop:2.3.0
  • Apache » Hadoop » Version: 2.4.0
    cpe:2.3:a:apache:hadoop:2.4.0
  • Apache » Hadoop » Version: 2.4.1
    cpe:2.3:a:apache:hadoop:2.4.1
  • Apache » Hadoop » Version: 2.5.0
    cpe:2.3:a:apache:hadoop:2.5.0
  • Apache » Hadoop » Version: 2.5.1
    cpe:2.3:a:apache:hadoop:2.5.1
  • Apache » Hadoop » Version: 2.5.2
    cpe:2.3:a:apache:hadoop:2.5.2
  • Apache » Hadoop » Version: 2.6.0
    cpe:2.3:a:apache:hadoop:2.6.0
  • Apache » Hadoop » Version: 2.6.1
    cpe:2.3:a:apache:hadoop:2.6.1
  • Apache » Hadoop » Version: 2.6.2
    cpe:2.3:a:apache:hadoop:2.6.2
  • Apache » Hadoop » Version: 2.6.3
    cpe:2.3:a:apache:hadoop:2.6.3
  • Apache » Hadoop » Version: 2.6.4
    cpe:2.3:a:apache:hadoop:2.6.4
  • Apache » Hadoop » Version: 2.6.5
    cpe:2.3:a:apache:hadoop:2.6.5
  • Apache » Hadoop » Version: 2.7.0
    cpe:2.3:a:apache:hadoop:2.7.0
  • Apache » Hadoop » Version: 2.7.1
    cpe:2.3:a:apache:hadoop:2.7.1
  • Apache » Hadoop » Version: 2.7.2
    cpe:2.3:a:apache:hadoop:2.7.2
  • Apache » Hadoop » Version: 2.7.3
    cpe:2.3:a:apache:hadoop:2.7.3
  • Apache » Hadoop » Version: 2.7.4
    cpe:2.3:a:apache:hadoop:2.7.4
  • Apache » Hadoop » Version: 2.7.5
    cpe:2.3:a:apache:hadoop:2.7.5
  • Apache » Hadoop » Version: 2.7.6
    cpe:2.3:a:apache:hadoop:2.7.6
  • Apache » Hadoop » Version: 2.7.7
    cpe:2.3:a:apache:hadoop:2.7.7
  • Apache » Hadoop » Version: 2.8.0
    cpe:2.3:a:apache:hadoop:2.8.0
  • Apache » Hadoop » Version: 2.8.1
    cpe:2.3:a:apache:hadoop:2.8.1
  • Apache » Hadoop » Version: 2.8.2
    cpe:2.3:a:apache:hadoop:2.8.2
  • Apache » Hadoop » Version: 3.0.0
    cpe:2.3:a:apache:hadoop:3.0.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved