Description
The Hadoop cluster web interface is publicly accessible. This is not recommended on production systems.
Remediation
It's recommended to restrict access to this web interface.
References
Raining Shells - Ambari "0-day"
Hadoop MapReduce Next Generation - Setting up a Single Node Cluster.
Related Vulnerabilities
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.5)
YOURLS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3824)
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0464)
Go web application binary disclosure
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1818)