description: In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root.
problem types: Privilege escalation
affected:
{
product: Apache Hadoop
vendor: Apache Software Foundation
versions:
status: affected, version: 2.8.0
status: affected, version: 3.0.0-alpha1 and 3.0.0-alpha2
}