{"action":"Upgrade org.apache.hadoop:hadoop-common to 0.23.11 (0.x) or 2.4.1 (2.x) or later.","affected":[{"fixed":"0.23.11","introduced":"0.23.0"},{"fixed":"2.4.1","introduced":"2.0.0"}],"component":"org.apache.hadoop:hadoop-common","cve_ids":["CVE-2014-0229"],"ecosystem":"Maven","epss":0.01605,"exploited":false,"fixed_versions":["0.23.11","2.4.1"],"ghsa_id":"GHSA-9r7g-325h-mxrm","id":"tcs_01M5N8QMSMAM8RA8W9VY6GVYE2","modified_at":"2023-11-08T03:57:32.986597Z","published_at":"2022-05-17T02:53:20Z","references":["https://osv.dev/vulnerability/GHSA-9r7g-325h-mxrm","https://nvd.nist.gov/vuln/detail/CVE-2014-0229","https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_i1q_xvk_2r"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9r7g-325h-mxrm","url":"https://osv.dev/vulnerability/GHSA-9r7g-325h-mxrm"}],"summary":"Improper Authentication in Apache Hadoop"}