Cloudera JDBC Connector 安全漏洞

Cloudera JDBC Connector is a driver from Cloudera, Inc. A security vulnerability exists in Cloudera JDBC Connector versions prior to 2.6.26, which stems from the presence of a JNDI injection issue that allows an attacker to inject malicious parameters into a JDBC URL, which could lead to remote...

CVE-2016-5724

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...