Full title: Apache Hadoop YARN NodeManager Password Leak Vulnerability Category: remote exploits Platform: multiple In Apache Hadoop 2.7.3 and 2.7.4, the security fix for CVE-2016-3086 is incomplete. The YARN NodeManager can leak the password for credential store provider used by the NodeManager to YARN Applications. # 0day.today @ http://0day.today/