CVE-2021-29994

Cloudera Hue 4.6.0 allows XSS...

CVE-2021-32483

Cloudera Manager 7.2.4 contains an Incorrect Access Control vulnerability that allows privilege escalation to view restricted dashboards. Affected product: Cloudera Manager (version 7.2.4). Root cause: improper access-control checks enabling unauthorized view of a restricted dashboard. Impact: el...

CVE-2021-32483

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard...

CVE-2021-30132

CVE-2021-30132 affects Cloudera Manager 7.2.4 and is a Authorization/Access Control bypass vulnerability that allows Elevation of Privileges. The connected records (Red Hat, CNVD, CNNVD, CVE landing pages) consistently describe an authorization bypass in Cloudera Manager 7.2.4 leading to privileg...

CVE-2021-30132

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges...

CVE-2021-29243

The connected documents confirm CVE-2021-29243 is a cross-site scripting vulnerability in Cloudera Manager, affecting versions 5.x, 6.x, 7.1.x, 7.2.x and 7.3.x. The root cause details, exploit methods, and concrete impact scope beyond generic XSS are not provided in these sources. No remediation ...

CVE-2021-29243

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS...

CVE-2021-32482

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter...

CVE-2021-32482

CVE-2021-32482 affects Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x. Multiple connected sources describe a Cross‑Site Scripting (XSS) vulnerability exploitable via a path parameter. The root cause is an XSS condition in the path handling of Cloudera Manager; explicit exploit details, affect...

CVE-2021-29994

Cloudera Hue 4.6.0 allows XSS...

CVE-2021-29994

CVE-2021-29994 affects Cloudera Hue 4.6.0 with a cross-site scripting (XSS) vulnerability. The connected documents consistently describe an XSS issue in Hue 4.6.0, with impact noted as potential exposure of administrator cookies. No technical specifics (root cause, affected components, exploit ve...

CVE-2021-32481

CVE-2021-32481 affects Cloudera Hue 4.6.0 and enables Cross-Site Scripting via the type parameter. The vulnerability is documented across multiple sources (NVD entry with CVSS v3.1 base score 6.1, CVSS v2.0 base score 4.3) indicating a network-exposed flaw with user interaction required in the 3....

CVE-2021-32481

Cloudera Hue 4.6.0 allows XSS via the type parameter...

Cloudera Manager 安全漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.An incorrect access control vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit the vulnerability to elevate privileges and view restricted dashboards...

Cloudera Manager 跨站脚本漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. are vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via path parameters...

Cloudera Manager 跨站脚本漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. contain a cross-site scripting vulnerability. An attacker could use this vulnerability to launch an xss attack...

Cloudera Hue 跨站脚本漏洞

Cloudera Hue is a full-fledged open source SQL helper for querying any database and data repository.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker could use the vulnerability to obtain administrator cookies, etc...

Cloudera Hue 跨站脚本漏洞

Cloudera Hue is a mature open source SQL helper for querying any database and data warehouse.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via the type parameter...

Cloudera Manager 安全漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.An authorization bypass vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit this vulnerability to elevate privileges...

Cloudera Data Engineering Information Disclosure Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, USA that supports the creation of Apache Spark tasks on a cloud platform. A security vulnerability exists in Cloudera Data Engineering CDE version 1.3.0 that stems from a JWT authentication token being exposed t...