{"url":"http://public2.vulnerablecode.io/api/packages/54872?format=json","purl":"pkg:maven/org.apache.hadoop/hadoop-common@2.8.2","type":"maven","namespace":"org.apache.hadoop","name":"hadoop-common","version":"2.8.2","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.8.3","latest_non_vulnerable_version":"3.3.3","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/39317?format=json","vulnerability_id":"VCID-ryz9-55qq-cyd9","summary":"Information Exposure\nVulnerability in Apache Hadoop allows a cluster user to expose private files owned by the user running the `MapReduce` job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the `MapReduce` job history server host.","references":[{"reference_url":"https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91@%3Cgeneral.hadoop.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/a790a251ace7213bde9f69777dedb453b1a01a6d18289c14a61d4f91@%3Cgeneral.hadoop.apache.org%3E"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15713","reference_id":"CVE-2017-15713","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15713"},{"reference_url":"https://github.com/advisories/GHSA-3v44-382q-55f4","reference_id":"GHSA-3v44-382q-55f4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-3v44-382q-55f4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/54873?format=json","purl":"pkg:maven/org.apache.hadoop/hadoop-common@2.8.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hadoop/hadoop-common@2.8.3"},{"url":"http://public2.vulnerablecode.io/api/packages/53663?format=json","purl":"pkg:maven/org.apache.hadoop/hadoop-common@3.0.1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hadoop/hadoop-common@3.0.1"}],"aliases":["CVE-2017-15713","GHSA-3v44-382q-55f4"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ryz9-55qq-cyd9"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.hadoop/hadoop-common@2.8.2"}