Description
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications.
Remediation
References
http://mail-archives.apache.org/mod_mbox/hadoop-general/201701.mbox/%3C0ed32746-5a53-9051-5877-2b1abd88beb6%40apache.org%3E
http://www.securityfocus.com/bid/95335
Related Vulnerabilities
CVE-2022-2053 Vulnerability in maven package io.undertow:undertow-core
CVE-2020-4051 Vulnerability in maven package org.webjars.bower:dijit
CVE-2023-30526 Vulnerability in maven package org.jenkins-ci.plugins:reportportal
CVE-2020-7013 Vulnerability in npm package kibana
CVE-2021-40660 Vulnerability in maven package org.javadelight:delight-nashorn-sandbox