{"action":"Upgrade org.apache.hadoop:hadoop-client to 2.0.1-alpha or later.","affected":[{"fixed":"2.0.1-alpha","introduced":"2.0.0-alpha"}],"component":"org.apache.hadoop:hadoop-client","cve_ids":["CVE-2012-3376"],"ecosystem":"Maven","epss":0.02633,"exploited":false,"fixed_versions":["2.0.1-alpha"],"ghsa_id":"GHSA-qmh2-h7r6-gm6q","id":"tcs_01M5N99TM8KMKC1PC39WFE7FGX","modified_at":"2023-11-08T03:57:05.917360Z","published_at":"2022-05-17T02:54:07Z","references":["https://osv.dev/vulnerability/GHSA-qmh2-h7r6-gm6q","https://nvd.nist.gov/vuln/detail/CVE-2012-3376","https://github.com/apache/hadoop","https://seclists.org/fulldisclosure/2012/Jul/78","https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html","http://archives.neohapsis.com/archives/bugtraq/2012-07/0049.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qmh2-h7r6-gm6q","url":"https://osv.dev/vulnerability/GHSA-qmh2-h7r6-gm6q"}],"summary":"Client BlockTokens not checked in Apache Hadoop"}