CVE-2012-4449

CVE-2012-4449 affects Apache Hadoop: prior to 0.23.4, 1.x prior to 1.0.4, and 2.x prior to 2.0.2, token passwords are generated using a 20‑bit secret when Kerberos security features are enabled. This weak secret can be brute‑force cracked, enabling context‑dependent attackers to compromise secret...