CVE:CVE-2014-0229
CNNVD:CNNVD-201703-1044
Cloudera CDH是美国Cloudera公司的一套开源的用于运行Apache Hadoop的平台。Apache Hadoop是一套开源的分布式系统基础架构，它能够对大量数据进行分布式处理，并具有高可靠性、高扩展性、高容错性等特点。
Cloudera CDH 5.0.2之前的5.0.x版本中使用的Apache Hadoop 0.23.11之前的0.23.x版本和2.4.1之前的2.x版本中存在安全漏洞，该漏洞源于程序没有正确检查权限。远程攻击者可利用该漏洞造成拒绝服务或执行任意命令。
solution:Upgrade cloudera cdh to a higher version than 5.0.0,5.0.0:beta,5.0.0:beta2,and avoid the version 5.0.0,5.0.0:beta,5.0.0:beta2; Upgrade apache hadoop to a higher version than 0.23.0,0.23.1,0.23.3,0.23.4,0.23.5,0.23.6,0.23.7,0.23.8,0.23.9,0.23.10,2.0.0:alpha,2.0.1:alpha,2.0.2:alpha,2.0.3:alpha,2.0.4:alpha,2.0.5:alpha,2.0.6:alpha,2.1.0:beta,2.1.1:beta,2.2.0,2.3.0,2.4.0,and avoid the version 0.23.0,0.23.1,0.23.3,0.23.4,0.23.5,0.23.6,0.23.7,0.23.8,0.23.9,0.23.10,2.0.0:alpha,2.0.1:alpha,2.0.2:alpha,2.0.3:alpha,2.0.4:alpha,2.0.5:alpha,2.0.6:alpha,2.1.0:beta,2.1.1:beta,2.2.0,2.3.0,2.4.0