Client BlockTokens not checked in Apache Hadoop

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and...

blockpool.online XSS vulnerability

Open Bug Bounty ID: OBB-714143 Description| Value ---|--- Affected Website:| blockpool.online Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

PT-2012-4671

Name of the Vulnerable Software and Affected Versions Apache Hadoop version 2.0.0 alpha Description The issue concerns a problem where DataNodes in Apache Hadoop do not properly check BlockTokens of clients when Kerberos is enabled and a specific condition involving BlockPool checkout is met. Thi...