Microsoft Azure HDInsight Bugs Expose Big Data to Breaches
ID: 7e8d9198-d868-5df0-8e17-123565e3d376
STIX ID: report--7e8d9198-d868-5df0-8e17-123565e3d376
Feed Name: Dark Reading
Threat Score
Orca Security disclosed three high-risk vulnerabilities in Azure HDInsight affecting Apache Ambari and Apache Oozie: CVE-2023-38156 (Ambari JDBC endpoint can be abused to drop a reverse shell and escalate to root), CVE-2023-36419 (Oozie XXE allowing file reads and privilege escalation), and a separate Oozie input-validation bug that can cause a denial-of-service by freezing the dashboard; Microsoft released fixes on Oct 26 and HDInsight users must recreate clusters on the latest platform version to apply the updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.