cve.bz

CVE-2015-1776

6.2 mediumEPSS 0.3%

Medium (6.2) in apache hadoop. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in org.apache.hadoop:hadoop-common 2.6.5.

Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.

Severity

CVSS 3.0

6.2 medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-g48f-ff5h-5f64Mavenorg.apache.hadoop:hadoop-common>=2.6.0 <2.6.52.6.5

References

Check your stackJSON