CVE-2021-29215
Critical
Description
A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric.
SeverityCritical
CVSS9.8
Exploit probability—
ProductHpe Tez
PublishedJan 18, 2022
First seenJan 18, 2022
How to fix
Update
- hpe tez0.9.201907090334-1.noarch or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hpe tez | 0.8 ≤ v ≤ 0.8.201907081100-1.noarch, 0.9 ≤ v < 0.9.201907090334-1.noarch, 0.9.2 ≤ v ≤ 0.9.2.0.201907081043-1.noarch | 0.9.201907090334-1.noarch |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.