AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-15804

HIGH · CVSS 8.8 EPSS 0.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-15804
Severity
HIGH
CVSS
8.8
EPSS
0.96%

Original NVD Description

An issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x and earlier. Under certain conditions, it is possible for MapR ticket credentials to become compromised, allowing a user to escalate their privileges to act as (aka impersonate) any other user, including cluster administrators, aka bug# 31935. This affects all users who have enabled security on the MapR platform and is fixed in mapr-patch-5.2.1.42646.GA-20180731093831, mapr-patch-5.2.2.44680.GA-20180802011430, mapr-patch-6.0.0.20171109191718.GA-20180802011420, and mapr-patch-6.0.1.20180404222005.GA-20180806214919.