CVE-2016-3086

Critical

Published: 05/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The NodeManager in Apache Hadoop versions 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for the credential store provider used by the NodeManager for YARN applications.

Risk Assessment

The leakage of the password may lead to unauthorized access to sensitive data and resources in the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest version of Apache Hadoop to mitigate this vulnerability and secure access to sensitive data.

Original NVD description (English source)

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.