Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-7669

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 75.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 8.5
Products affected by CVE-2017-7669
  • Apache » Hadoop » Version: 2.8.0
    cpe:2.3:a:apache:hadoop:2.8.0
  • Apache » Hadoop » Version: 3.0.0
    cpe:2.3:a:apache:hadoop:3.0.0


Contact Us

Shodan ® - All rights reserved