Information Leakage

Apache Hadoop HDFS is vulnerable to information leakage. When listXAttrs is used, the library misses the authorization checks for path-level read permissions, leaking extended attribute key/value pairs...