CVE-2017-7399

Technical details (affected software/component, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2017-7399

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users...

CVE-2015-4457

Multiple cross-site scripting XSS vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors...

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

CVE-2015-6495

There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...

Design/Logic Flaw

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

Information disclosure

There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...

CVE-2015-4457

CVE-2015-4457 describes multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI prior to version 5.4.3. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The available references consistently state XSS as the impact,...

CVE-2015-4457

Multiple cross-site scripting XSS vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors...

CVE-2015-6495

There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...

CVE-2015-6495

This CVE concerns Cloudera Manager prior to version 5.4.6, where the Diagnostic Support Bundles could disclose sensitive information. Multiple sources (NVD, Red Hat, CNVD, CVE lists) confirm an information-disclosure vulnerability affected Cloudera Manager before 5.4.6. Impact centers on confiden...

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

Cloudera Manager Access Control Error Vulnerability

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. An Access Control Error vulnerability exists in Cloudera Manager version 5.15 and earlier. The vulnerability arises from the...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

Design/Logic Flaw

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2017-9326

The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed...