Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

How could an attacker exploit this vulnerability? An authenticated attacker with access to the target HDI cluster could send a specially crafted network request to create and assign themselves as a Cluster Administrator. Cluster Administrators can read/write/delete and perform all resource service management operations.

What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could gain cluster administrator privileges.