Information Disclosure

Apache Hadoop is vulnerable to information disclosure. A local user on an HDFS DataNode may be able to generate a block token that grants unauthorized read access to random files by guessing certain fields in the token...