CVE-2016-5393

CVE-2016-5393: vulnerability in Apache Hadoop

Published · Updated

Follow this CVE+ Monitor Apache Hadoop+ Monitor org.apache.hadoop:hadoop-common

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.1%
In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote user who can authenticate with the HDFS NameNode can possibly run arbitrary commands with the same privileges as the HDFS service.
Affected products
n/a · Apache Hadoop