Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Hadoop 信息泄露漏洞
Vulnerability Description
Apache Hadoop是美国阿帕奇（Apache）软件基金会的一套开源的分布式系统基础架构，它能够对大量数据进行分布式处理，并具有高可靠性、高扩展性、高容错性等特点。 Apache Hadoop 2.6.x版本中存在安全漏洞，该漏洞源于当程序启用Intermediate data encryption功能时，会加密MapReduce任务生成的中间数据，并将其与加密密钥存储在磁盘的证书文件中。本地攻击者可通过读取该文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A