CVE-2017-3162

CVE-2017-3162 describes an input validation vulnerability in Apache Hadoop versions prior to 2.7.0. HDFS clients interacting with a DataNode servlet can provide an unvalidated NameNode query parameter, potentially leading to various impacts. With a CVSS score of 7.3 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially resulting in partial loss of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.