CVE-2020-9492
26.01.2021, 18:16
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | hadoop | 2.0.0 ≤ 𝑥 ≤ 2.10.0 |
| apache | hadoop | 3.0.0 ≤ 𝑥 ≤ 3.1.3 |
| apache | hadoop | 3.2.0 ≤ 𝑥 ≤ 3.2.1 |
| apache | solr | 8.6.0 |
| apache | solr | 8.6.2 |
| oracle | financial_services_crime_and_compliance_management_studio | 8.0.8.2.0 |
| oracle | financial_services_crime_and_compliance_management_studio | 8.0.8.3.0 |
𝑥
= Vulnerable software versions
References