CVE-2012-2230

2012-04-1210:45:00

CWE-310

[email protected]

web.nvd.nist.gov

cloudera

manager

service

configuration

installation

vulnerability

cve-2012-2230

nvd

6.4 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

55.0%

JSON

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

CPENameOperatorVersion
cloudera:cloudera_managercloudera cloudera managereq3.7.2
cloudera:cloudera_managercloudera cloudera managereq3.7.4
cloudera:cloudera_managercloudera cloudera managereq3.7.1
cloudera:cloudera_managercloudera cloudera managereq3.7.3
cloudera:cloudera_managercloudera cloudera managereq3.7.0
cloudera:cloudera_service_and_configuration_managercloudera cloudera service and configuration managereq3.5

CPE	Name	Operator	Version
cloudera:cloudera_manager	cloudera cloudera manager	eq	3.7.2
cloudera:cloudera_manager	cloudera cloudera manager	eq	3.7.4
cloudera:cloudera_manager	cloudera cloudera manager	eq	3.7.1
cloudera:cloudera_manager	cloudera cloudera manager	eq	3.7.3
cloudera:cloudera_manager	cloudera cloudera manager	eq	3.7.0
cloudera:cloudera_service_and_configuration_manager	cloudera cloudera service and configuration manager	eq	3.5