Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-9492

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f8vc-wfc8-hxqh

Improper Privilege Management in Apache Hadoop In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

gitlab/maven/org.apache.hadoop/hadoop-common/CVE-2020-9492

Incorrect Authorization In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

gitlab/maven/org.apache.hadoop/hadoop-hdfs/CVE-2020-9492

Improper Privilege Management In Apache Hadoop to to to, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

gitlab/maven/org.apache.hadoop/hadoop-main/CVE-2020-9492

Improper Privilege Management In Apache Hadoop to to to, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

gitlab/maven/org.apache.solr/solr-core/CVE-2020-9492

Incorrect Authorization In Apache Hadoop, WebHDFS client might send `SPNEGO` authorization header to remote URL without proper verification.