CVE-2015-1889

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

Design/Logic Flaw

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

CVE-2015-1889

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

CVE-2015-1889

IBM InfoSphere BigInsights Big SQL component (versions 3.0–3.0.0.2) contains an unauthorized HDFS data-access bypass vulnerability. A remote authenticated user can exploit via (1) a crafted CREATE HADOOP TABLE statement referencing another user’s data or (2) importing a Hive table definition with...

CVE-2015-1889: Improper Neutralization of Special Elements used in an SQL Command

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via 1 a crafted CREATE HADOOP TABLE statement referencing the data of an arbitrary user or 2 an import of a certain Hive table definition with...

PT-2015-5488

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 3.0 through 3.0.0.2 Description The issue allows remote authenticated users to bypass intended HDFS data-access restrictions. This can be achieved via a crafted CREATE HADOOP TABLE statement referencing the...

Mail.ru: HDFS NameNode Public disclosure: http://185.5.139.33:50070/dfshealth.jsp

Here it is: http://185.5.139.33:50070/dfshealth.jsp...

[CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Users of Apache Hadoop should be aware of a security vulnerability recently discovered, as described by the following CVE. In particular, please note the "Users affected", "Versions affected", and "Mitigation" sections. The project team will be...

Apache Hadoop HDFS DataNode Web Detection

The web interface for a DataNode was detected on the remote host. A DataNode manages the storage attached to a node in a Hadoop Distributed File System HDFS cluster. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50307; scriptversion"1.8"; scriptcvsdate"Date:...

Apache Hadoop HDFS NameNode Web Detection

The web interface for a NameNode was detected on the remote host. A NameNode is the master server in a Hadoop Distributed File System HDFS cluster. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50306; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/25";...