{"action":"Upgrade org.apache.hadoop:hadoop-main to 2.8.6 (2.8.x), 2.9.3 (2.9.x) or 3.0.1 (3.0.x) or later.","affected":[{"fixed":"3.0.1","introduced":"3.0.0-alpha2"},{"fixed":"2.9.3","introduced":"2.9.0"},{"fixed":"2.8.6","introduced":"2.8.0"}],"component":"org.apache.hadoop:hadoop-main","cve_ids":["CVE-2018-11765"],"ecosystem":"Maven","epss":0.05207,"exploited":false,"fixed_versions":["3.0.1","2.9.3","2.8.6"],"ghsa_id":"GHSA-rhh9-cm65-3w54","id":"tcs_01M5N9BXDY9QP85GNSTATGB30D","modified_at":"2024-02-17T05:34:33.603105Z","published_at":"2021-04-30T17:29:30Z","references":["https://osv.dev/vulnerability/GHSA-rhh9-cm65-3w54","https://nvd.nist.gov/vuln/detail/CVE-2018-11765","https://lists.apache.org/thread.html/r17d94d132b207dad221595fd8b8b18628f5f5ec7e3f5be939ecd8928@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r2c7f899911a04164ed1707083fcd4135f8427e04778c87d83509b0da%40%3Cgeneral.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r46447f38ea8c89421614e9efd7de5e656186d35e10fc97cf88477a01@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r4dddf1705dbedfa94392913b2dad1cd2d1d89040facd389eea0b3510@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r74825601e93582167eb7cdc2f764c74c9c6d8006fa90018562fda60f@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r79b15c5b66c6df175d01d7560adf0cd5c369129b9a161905e0339927@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rb21df54a4e39732ce653d2aa5672e36a792b59eb6717f2a06bb8d02a@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rb241464d83baa3749b08cd3dabc8dba70a9a9027edcef3b5d4c24ef4@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rbe25cac0f499374f8ae17a4a44a8404927b56de28d4c41940d82b7a4@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reea5eb8622afbfbfca46bc758f79db83d90a3263a906c4d1acba4971@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/rf9dfa8b77585c9227db9637552eebb2ab029255a0db4eb76c2b6c4cf@%3Cdev.druid.apache.org%3E","https://security.netapp.com/advisory/ntap-20201016-0005"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rhh9-cm65-3w54","url":"https://osv.dev/vulnerability/GHSA-rhh9-cm65-3w54"}],"summary":"Improper Authentication in Apache Hadoop"}