{"action":"Upgrade org.apache.hadoop:hadoop-client to 0.23.4 (0.x), 1.0.4 (1.x) or 2.0.2 (2.x) or later.","affected":[{"fixed":"0.23.4","introduced":"0"},{"fixed":"1.0.4","introduced":"1.0.0"},{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"org.apache.hadoop:hadoop-client","cve_ids":["CVE-2012-4449"],"ecosystem":"Maven","epss":0.01191,"exploited":false,"fixed_versions":["0.23.4","1.0.4","2.0.2"],"ghsa_id":"GHSA-q46v-cj5v-hvg6","id":"tcs_01M5N98K85RC1S3A5HVRS36JHF","modified_at":"2023-11-08T03:57:07.826616Z","published_at":"2022-05-17T00:22:31Z","references":["https://osv.dev/vulnerability/GHSA-q46v-cj5v-hvg6","https://nvd.nist.gov/vuln/detail/CVE-2012-4449","https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#topic_1_0","http://mail-archives.apache.org/mod_mbox/hadoop-general/201210.mbox/%3CCA+z3+9FYdPmzBEaMZ71SUqzRx=eU=o4mSHUsbrpzgR9X_F1c0Q@mail.gmail.com%3E"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q46v-cj5v-hvg6","url":"https://osv.dev/vulnerability/GHSA-q46v-cj5v-hvg6"}],"summary":"Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop"}