CVE-2012-2945: Improper Link Resolution Before File Access ('Link Following')

April 23, 2022 (updated August 29, 2023)

Hadoop 1.0.3 contains a symlink vulnerability.

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=535861
github.com/advisories/GHSA-v5c9-98f7-2h54
nvd.nist.gov/vuln/detail/CVE-2012-2945
seclists.org/fulldisclosure/2012/Jul/3
security-tracker.debian.org/tracker/CVE-2012-2945

Code Behaviors & Features

Detect and mitigate CVE-2012-2945 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →