CVE-2014-0220

2014-06-1014:55:00

CWE-200

[email protected]

web.nvd.nist.gov

cloudera

manager

cve-2014-0220

remote authentication

information disclosure

5.9 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.4%

JSON

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.

CPENameOperatorVersion
cloudera:cloudera_managercloudera cloudera managereq4.7.2
cloudera:cloudera_managercloudera cloudera managereq4.8.1
cloudera:cloudera_managercloudera cloudera managereq4.5.0
cloudera:cloudera_managercloudera cloudera managereq4.5.2
cloudera:cloudera_managercloudera cloudera managereq4.1.1
cloudera:cloudera_managercloudera cloudera managereq4.6.1
cloudera:cloudera_managercloudera cloudera managerle4.8.2
cloudera:cloudera_managercloudera cloudera managereq4.1.4
cloudera:cloudera_managercloudera cloudera managereq5.0.0
cloudera:cloudera_managercloudera cloudera managereq4.5.3

CPE	Name	Operator	Version
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.7.2
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.8.1
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.5.0
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.5.2
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.1.1
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.6.1
cloudera:cloudera_manager	cloudera cloudera manager	le	4.8.2
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.1.4
cloudera:cloudera_manager	cloudera cloudera manager	eq	5.0.0
cloudera:cloudera_manager	cloudera cloudera manager	eq	4.5.3