{"action":"Upgrade org.apache.hadoop:hadoop-main to 0.23.2 (0.x) or 1.0.2 (1.x) or later.","affected":[{"fixed":"0.23.2","introduced":"0.23"},{"fixed":"1.0.2","introduced":"1.0"}],"component":"org.apache.hadoop:hadoop-main","cve_ids":["CVE-2012-1574"],"ecosystem":"Maven","epss":0.04772,"exploited":false,"fixed_versions":["0.23.2","1.0.2"],"ghsa_id":"GHSA-c6f9-4pmv-m7m6","id":"tcs_01M5N8RQSY3JFG63B2JJRD3A5D","modified_at":"2024-12-06T05:37:36.225387Z","published_at":"2022-05-17T02:54:07Z","references":["https://osv.dev/vulnerability/GHSA-c6f9-4pmv-m7m6","https://nvd.nist.gov/vuln/detail/CVE-2012-1574","https://github.com/apache/hadoop","https://seclists.org/fulldisclosure/2012/Apr/70","https://web.archive.org/web/20120720041621/https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin#ClouderaSecurityBulletin-MapReducewithSecurity","https://web.archive.org/web/20151001135054/http://archives.neohapsis.com/archives/bugtraq/2012-04/0051.html","https://web.archive.org/web/20161215212154/https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#topic_1_0_2","https://web.archive.org/web/20200229125105/http://www.securityfocus.com/bid/52939"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-c6f9-4pmv-m7m6","url":"https://osv.dev/vulnerability/GHSA-c6f9-4pmv-m7m6"}],"summary":"Apache Hadoop allows impersonation of arbitrary cluster user accounts"}