apache/hadoop: The latest CVE Vulnerabilities and Exploits for Penetration Test
apache/hadoop Vulnerability Summary Vendor name: apache Product name: hadoop Total vulnerabilities: 29 (as 2023-05-04) apache/hadoop Vulnerability List CVE-2020-9492: In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client… Published: 2021-01-26T18:16:00 Last Modified: 2021-11-30T22:21:00
Summary
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.
Common Weakness Enumeration (CWE): CWE-863: Incorrect Authorization CWE Description: The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.