[HIVE-17152] Improve security of random generator for HS2 cookies

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0
• Component/s: HiveServer2
• Assignee: Tao Li
• Reporter: Tao Li
• Created: 21/Jul/17 18:48
• Updated: 22/May/18 23:58
• Resolved: 07/Sep/17 17:54

Description

The random number generated is used as a secret to append to a sequence and SHA to implement a CookieSigner. If this is attackable, then it's possible for an attacker to sign a cookie as if we had. We should fix this and use SecureRandom as a stronger random function .

HTTPAuthUtils has a similar issue. If that is attackable, an attacker might be able to create a similar cookie. Paired with the above issue with the CookieSigner, it could reasonably spoof a HS2 cookie.