Privilege Escalation Vulnerability in Apache Hadoop

CVE-2017-3166

What is CVE-2017-3166?

In specific versions of Apache Hadoop, a vulnerability exists where files within an encryption zone, if given world-readable access permissions, can be localized through YARN's mechanism. This results in such files being stored in a location that is accessible to all applications requesting to localize the file. This flaw can lead to unauthorized access and data exposure, posing a significant risk to sensitive information.

References