[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3CRz5pEBpI4_tAujnnL-K-7JgeZa-wkziGCMM9ynRho":3,"g5a-risk:CVE-2018-11765":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":93,"weaknesses":94,"weaknessesCount":103,"isActivelyExploited":104,"cisaInfo":26,"otxData":26,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":150,"notableEvents":151},"CVE-2018-11765","What is CVE-2018-11765?","In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through HTTP is not enabled.","In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos auth...","2020-09-30T18:15:15.477","2023-11-07T02:51:45.28",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.05207,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","hadoop","*","cpe:2.3:a:apache:hadoop:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"3.0.0","cpe:2.3:a:apache:hadoop:3.0.0:-:*:*:*:*:*:*",2,[53,57,62,65,68,71,74,77,80,83,86,89],{"url":54,"source":55,"tags":56},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr17d94d132b207dad221595fd8b8b18628f5f5ec7e3f5be939ecd8928%40%3Ccommits.druid.apache.org%3E","Apache",[],{"url":58,"source":55,"tags":59},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr2c7f899911a04164ed1707083fcd4135f8427e04778c87d83509b0da%40%3Cgeneral.hadoop.apache.org%3E",[60,61],"Mailing List","Vendor Advisory",{"url":63,"source":55,"tags":64},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr46447f38ea8c89421614e9efd7de5e656186d35e10fc97cf88477a01%40%3Ccommits.druid.apache.org%3E",[],{"url":66,"source":55,"tags":67},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr4dddf1705dbedfa94392913b2dad1cd2d1d89040facd389eea0b3510%40%3Ccommits.druid.apache.org%3E",[],{"url":69,"source":55,"tags":70},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr74825601e93582167eb7cdc2f764c74c9c6d8006fa90018562fda60f%40%3Ccommits.druid.apache.org%3E",[],{"url":72,"source":55,"tags":73},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr79b15c5b66c6df175d01d7560adf0cd5c369129b9a161905e0339927%40%3Ccommits.druid.apache.org%3E",[],{"url":75,"source":55,"tags":76},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb21df54a4e39732ce653d2aa5672e36a792b59eb6717f2a06bb8d02a%40%3Ccommits.druid.apache.org%3E",[],{"url":78,"source":55,"tags":79},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb241464d83baa3749b08cd3dabc8dba70a9a9027edcef3b5d4c24ef4%40%3Ccommits.druid.apache.org%3E",[],{"url":81,"source":55,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbe25cac0f499374f8ae17a4a44a8404927b56de28d4c41940d82b7a4%40%3Ccommits.druid.apache.org%3E",[],{"url":84,"source":55,"tags":85},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Freea5eb8622afbfbfca46bc758f79db83d90a3263a906c4d1acba4971%40%3Ccommits.druid.apache.org%3E",[],{"url":87,"source":55,"tags":88},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf9dfa8b77585c9227db9637552eebb2ab029255a0db4eb76c2b6c4cf%40%3Cdev.druid.apache.org%3E",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20201016-0005\u002F","Netapp",[],12,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2018-11765? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11765, a high severity cyber security vulnerability from 2020. In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2...","CVE-2018-11765, CVE-2018-11765 vulnerability, CVE-2018-11765 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, hadoop vulnerability","\u002Fwhat-is\u002Fcve-2018-11765",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11765","Cybersecurity","CVE-2018-11765, CVE-2018-11765 vulnerability, CVE-2018-11765 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132],{"Operator":26,"Negate":26,"Nodes":133},[134],{"Operator":135,"Negate":26,"CPEMatch":136},"OR",[137,141,145,147],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":139,"VersionEndExcluding":26,"VersionEndIncluding":140},"9CDB408E-C3A0-49D5-97C7-364C569DC6D0","2.8.0","2.8.5",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":143,"VersionEndExcluding":26,"VersionEndIncluding":144},"40E7EF32-1366-44C5-8F31-65E2515BD7EE","2.9.0","2.9.2",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":146,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2547A78B-A084-4AD4-9312-B97B12C30BFD",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:hadoop:3.0.0:alpha2:*:*:*:*:*:*","38BCF20D-169E-4847-8880-A223467B8639",[],[],{"lastModified":11,"cacheTime":153,"version":32},1792344670006,{"score":155,"band":156,"action":157,"scoredAt":158},47,"Medium","Plan remediation","2026-10-16T06:49:33.856418+00:00"]