Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-11766

In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
Products affected by CVE-2018-11766
  • Apache » Hadoop » Version: 2.7.4
    cpe:2.3:a:apache:hadoop:2.7.4
  • Apache » Hadoop » Version: 2.7.5
    cpe:2.3:a:apache:hadoop:2.7.5
  • Apache » Hadoop » Version: 2.7.6
    cpe:2.3:a:apache:hadoop:2.7.6


Contact Us

Shodan ® - All rights reserved