SecGen/modules/vulnerabilities/unix/http/hadoop_yarn_rce/secgen_metadata.xml at 14786131367b05c8a743c5fc432e5ff1daed5ca4 · cliffe/SecGen · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
<vulnerability xmlns="http://www.github/cliffe/SecGen/vulnerability"
               xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
               xsi:schemaLocation="http://www.github/cliffe/SecGen/vulnerability">

<name>Hadoop YARN ResourceManager Unauthenticated Command Execution /name>
  <author>Sofia Markusfeld</author>
  <module_license>Apache</module_license>


     <!--  fix -->
  <description>"This module uses built-in functionality to execute arbitrary commands on an unsecured Hadoop server which is not configured for strong
          authentication, via Hadoop's standard ResourceManager REST API."
  </description>
 <!--  cleanup/add -->
 <type>remote</type>
  <type></type>
  <type></type>
  <privilege></privilege>
  <access>remote</access>
  <platform>linux</platform>

     <!--  cleanup/add -->
   <read_fact></read_fact>
   <read_fact></read_fact>
   <read_fact></read_fact>

   <!-- flags or other secrets exposed after exploitation -->
  <default_input into="strings_to_leak">
    <generator type="message_generator"/>
  </default_input>

    <!-- these details need to be known or bruteforced to successful exploit the service -->

    <!--optional vulnerability details-->
  <!-- rce vuln -->
  <cve>CVE-2022-24706</cve>
  <!-- bruteforce vuln -->
  <cve></cve>