CVE-2018-11766
EUVD-2018-082127.11.2018, 14:29
In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | hadoop | 2.7.4 ≤ 𝑥 ≤ 2.7.6 |
𝑥
= Vulnerable software versions
References