Vulnerability Details CVE-2017-7669
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.7%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 8.5
Products affected by CVE-2017-7669
-
cpe:2.3:a:apache:hadoop:2.8.0
-
cpe:2.3:a:apache:hadoop:3.0.0