← back
CVE-2021-33036

Apache Hadoop Privilege escalation vulnerability

EPSS 3.2%CWE-24CWE-264
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →