CVE-2012-1574

Published: Apr 12, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.

Affected (13)

Products: Apache: Hadoop · Cloudera: Cloudera Cdh, Hadoop

1 product

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Hadoop	Version 0.20.203.0
Apache Hadoop	Version 0.20.204.0
Apache Hadoop	Version 0.20.205.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Apache Hadoop	Version 0.23.0
Apache Hadoop	Version 0.23.1
Apache Hadoop	Version 1.0.0
Apache Hadoop	Version 1.0.1

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Cloudera Cloudera Cdh	Version cdh3 0
Cloudera Cloudera Cdh	Version cdh3 1
Cloudera Cloudera Cdh	Version cdh3 2
Cloudera Hadoop	Version 0.20-sbin
Cloudera Hadoop	Version 0.20.1+169
Cloudera Hadoop	Version 0.20.2+923