A malicious Java user-defined function (UDF) for Apache Hive that allows remote code execution on HiveServer2. The attacker deployed it against the Thai Ministry of Finance's Hadoop cluster by exploiting the default NONE authentication mode.
A malicious Java user-defined function (UDF) for Apache Hive that allows remote code execution on HiveServer2. The attacker deployed it against the Thai Ministry of Finance's Hadoop cluster by exploiting the default NONE authentication mode.