Hadoop YARN ResourceManager publicly accessible
Description
Apache Hadoop is a collection of open-source software utilities that facilitate using a network of many computers to solve problems involving massive amounts of data and computation.
Yarn ResourceManager (RM) is the master that arbitrates all the available cluster resources and thus helps manage the distributed applications running on the YARN system.
By default, the Hadoop YARN ResourceManager allows any request to be made by anyone. This service should not be accessible on a production website without authentication.
Remediation
Disable external access to the Hadoop YARN ResourceManager.