Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2017-03-23T20:00:00
Updated: 2024-08-06T09:05:39.339Z
Reserved: 2013-12-03T00:00:00
Link: CVE-2014-0229
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-03-23T20:59:00.203
Modified: 2024-11-21T02:01:42.633
Link: CVE-2014-0229
Redhat
No data.