Design/Logic Flaw

2019-11-2614:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

JSON

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

CPENameOperatorVersion
cdhge5.0.0
cdhlt5.7.0

CPE	Name	Operator	Version
	cdh	ge	5.0.0
	cdh	lt	5.7.0

References

docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html