PT-2016-3773 · Apache · Hadoop Connector

Publicado 2016-01-02 · Atualizado 2016-01-07 · CVE-2015-7430

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hadoop connector versions 1.1.1, 2.4, 2.5, and 2.7.0-0 through 2.7.0-2

Description The issue allows local users to read or write to arbitrary GPFS data via unspecified vectors.

Recommendations For version 1.1.1, update to a version after 2.7.0-2. For version 2.4, update to a version after 2.7.0-2. For version 2.5, update to a version after 2.7.0-2. For versions 2.7.0-0 through 2.7.0-2, update to version 2.7.0-3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-7430

Produtos afetados

Hadoop Connector

Referências · 2

• http://www-01.ibm.com/support/docview.wss?uid=isg3T1022979 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7430 · Nota de Segurança