Description

The Hadoop cluster web interface is publicly accessible. This is not recommended on production systems.

Remediation

It's recommended to restrict access to this web interface.

References

Raining Shells - Ambari "0-day"

Hadoop MapReduce Next Generation - Setting up a Single Node Cluster.

Related Vulnerabilities

WordPress Plugin Easy Author Image Information Disclosure (1.5)

MySQL utf8 4-byte truncation

Cookies without HttpOnly flag set

XML external entity injection via File Upload

The POODLE attack (SSLv3 with CBC cipher suites)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Configuration