CVE-2016-4947

2017-03-0716:59:00

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.9%

JSON

Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.

CPENameOperatorVersion
hueeqcdh4-base-2.5.0
hueeqcdh5-base-3.0.0
hueeqcdh5-base-3.9.0
hueeqrelease-3.6.0
hueeqrelease-0.9.1
hueeqrelease-3.5.0
hueeqcdh5-base-3.6.0
hueeqrelease-1.1.0
hueeqcdh5-base-2.5.0
hueeqcdh5-base-3.5.0

Name	Operator	Version
hue	eq	cdh4-base-2.5.0
hue	eq	cdh5-base-3.0.0
hue	eq	cdh5-base-3.9.0
hue	eq	release-3.6.0
hue	eq	release-0.9.1
hue	eq	release-3.5.0
hue	eq	cdh5-base-3.6.0
hue	eq	release-1.1.0
hue	eq	cdh5-base-2.5.0
hue	eq	cdh5-base-3.5.0