What is CVE-2018-15804?

CVE-2018-15804 is a high-severity vulnerability in Mapr. CVSS score: 8.8/10. Published 2018-08-23.

How severe is CVE-2018-15804?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Mapr

CVE-2018-15804

An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certain conditions, it is possible for MapR ticket credentials to become compromised, allowing a user to escalate their privileges to act as (aka impersonate) any other user, including cluster administrators, aka bug# 31935. This affects all users who have enabled security on the MapR platform and is fixed in mapr-patch-5.2.1.42646.GA-20180731093831, mapr-patch-5.2.2.44680.GA-20180802011430, mapr-patch-6.0.0.20171109191718.GA-20180802011420, and mapr-patch-6.0.1.20180404222005.GA-20180806214919.

EPSS: 0.010 (58.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mapr
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-15804?: CVE-2018-15804 is a high-severity vulnerability in Mapr. CVSS score: 8.8/10. Published 2018-08-23.
How severe is CVE-2018-15804?: High severity. CVSS v3 base score is 8.8 out of 10.