, if you look at the comments in you will notice that all versions of HDP prior to 2.5 are vulnerable to a remotely executable namenode vulnerability, which allows an attacker to run arbitrary code as the namenode (hdfs) user, bypassing all HDFS-based security. Also, since the hdfs user is normally in the hadoop group, it gets special access to certain other on-disk locations on the individual node filesystems that should normally be protected.
Versions:
all versions older than CDH 5.4.11 and HDP 2.5.0.0
Please refer to for more info.