Exposure of Sensitive Information in Hadoop

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications...

CVE-2017-15718

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications...

Password Leakage

Apache Hadoop is vulnerable to password leakage. It is possible to leak the password for credential store provider used by the NodeManager to YARN Applications. If users use the CredentialProvider feature to encrypt passwords used in NodeManager configs, it may be possible for any Container...