Land #14396, hadoop_unauth_exec clarification

2020-11-16 12:44:13 -06:00
parent 90ea63c1e2 0feff932f2
commit f73a88a39c
2 changed files with 5 additions and 3 deletions
@@ -1,6 +1,7 @@
 ## Description

-This module exploits an unauthenticated command execution vulnerability in Apache Hadoop through ResourceManager REST API.
+This module uses built-in functionality to execute arbitrary commands on an unsecured Hadoop server which is
+not configured for strong authentication, via Hadoop's standard ResourceManager REST API.

 ## Vulnerable Application

@@ -14,7 +15,6 @@ https://github.com/vulhub/vulhub/tree/master/hadoop/unauthorized-yarn

 Change dictory to `vulhub/hadoop/unauthorized-yarn`, and run `docker-compose up -d`

-
 ## Verification Steps

  1. Install the application