Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-15718

Fixed upstream EPSS 4%

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.

Published 2018-01-24 · CVE record · OSV

Products: Apache Software Foundation Apache Hadoop

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.hadoop:hadoop-main2.7.5