CVE-2017-15713: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML...

Unauthorized Access

Apache Hadoop Mapreduce is vulnerable to unauthorized access. If a file with world-readable access permissions is localized through YARN's localization mechanism, the file will be stored in a world-readable location that can then be accessed by a malicious user...

Apache Hadoop 'MapReduce' Information Disclosure Vulnerability

Apache Hadoop is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"...

Apache CouchDB 2.0.0 - Local Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open source database software that focuses on ease of use and having an architecture. It has a...

CVE-2015-1776: Exposure of Sensitive Information to an Unauthorized Actor

Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file...

Researchers Exploit Cloud Browsers to do Anonymous, Large-Scale Computing

Researchers from two U.S. universities have created a way to anonymously use cloud-based Web browsers to perform large-scale computing tasks – a feat that also demonstrates how hackers might secretly harness massive computing power to launch attacks. Using the MapReduce technique developed by...

CVE-2012-1574

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

Code injection

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

CVE-2012-1574

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

CVE-2012-1574

CVE-2012-1574 affects Apache Hadoop’s Kerberos/MapReduce security, enabling remote authenticated users to impersonate arbitrary cluster user accounts. Affected versions include Hadoop 0.20.203.0–0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2 (as deployed in Cloudera CDH CDH3u0–CDH3u2, a...

CVE-2012-1574: Undefined Security Weakness

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

Apache Hadoop 未明用户扮演漏洞(CVE-2012-1574)

Bugtraq ID: 52939 CVE ID：CVE-2012-1574 Apache Hadoop是一款设计用来在由通用计算设备组成的大型集群上执行分布式应用的框架 Apache Hadoop存在一个未明安全漏洞，允许恶意用户扮演其他用户。要成功利用漏洞需要目标用户使用了Kerberos / MapReduce安全特性 0 Cloudera Cloudera Manager 3.7.4 Cloudera Cloudera Manager 3.7 Apache Software Foundation Hadoop 1.0.1 Apache Software Foundation...

Apache Hadoop MapReduce TaskTracker Web Interface

The web interface for Hadoop MapReduce TaskTracker was detected on the remote host. This interface can be used to monitor MapReduce tasks submitted to this node. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50305; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"...

Apache Hadoop MapReduce JobTracker Web Detection

The web interface for Hadoop MapReduce JobTracker was detected on the remote host. This interface can be used to monitor jobs submitted to the Hadoop MapReduce engine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50304; scriptversion"1.7"; scriptcvsdate"Date:...

CouchDB Detection

This host is running CouchDB. Apache CouchDB is a document-oriented database that can be queried and indexed in a MapReduce fashion using JavaScript. CouchDB also offers incremental replication with bi-directional conflict detection and resolution. OpenVAS Vulnerability Test $Id:...