GHSA-v5c9-98f7-2h54

ghsaUSosv

Hadoop symlink vulnerability

view advisory published 2022-04-23Licence: CC-BY-4.0

Hadoop 1.0.3 contains a symlink vulnerability as a result of storing pid files in the shared `/tmp` directory by default.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2012-2945US	high7.5	2.67% (86th)	—	2019-10-29
Hadoop 1.0.3 contains a symlink vulnerability.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.