PT-2017-8630

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.5 and earlier Description The issue allows remote attackers to enumerate user sessions. This can be achieved by sending a request to the "api/v11/users/sessions" endpoint. Recommendations For Cloudera Manager versio...

CVE-2016-4950: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions...