Cloudera Manager 跨站脚本漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. are vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via path parameters...

Cloudera Manager 跨站脚本漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. contain a cross-site scripting vulnerability. An attacker could use this vulnerability to launch an xss attack...

CVE-2021-32483: Undefined Security Weakness

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard...

PT-2021-18560

Name of the Vulnerable Software and Affected Versions Cloudera Hue version 4.6.0 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or take control of the...

PT-2021-19720

Name of the Vulnerable Software and Affected Versions: Cloudera Hue version 4.6.0 Description: The issue allows for a cross-site scripting XSS attack via the type parameter. This means an attacker could potentially inject malicious scripts into the website, affecting users who access the page...

Cloudera Manager 安全漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.An incorrect access control vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit the vulnerability to elevate privileges and view restricted dashboards...

Cloudera Manager 安全漏洞

Cloudera Manager is an end-to-end application for managing CDH clusters.An authorization bypass vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit this vulnerability to elevate privileges...

Cloudera Hue 跨站脚本漏洞

Cloudera Hue is a mature open source SQL helper for querying any database and data warehouse.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via the type parameter...

CVE-2021-29243: Improper Neutralization of Input During Web Page Generation

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS...

PT-2021-18621

Name of the Vulnerable Software and Affected Versions Cloudera Manager version 7.2.4 Description The issue is related to Incorrect Access Control, which allows Escalation of Privileges. Recommendations For Cloudera Manager version 7.2.4, update to a version that contains a fix for this issue. At...

CVE-2021-30132: Undefined Security Weakness

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges...

Cloudera Hue 跨站脚本漏洞

Cloudera Hue is a full-fledged open source SQL helper for querying any database and data repository.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker could use the vulnerability to obtain administrator cookies, etc...

PT-2021-18139

Name of the Vulnerable Software and Affected Versions: Cloudera Manager versions 5.x through 7.3.x Description: The issue allows for Cross-Site Scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or...

Cloudera Data Engineering Information Disclosure Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, USA that supports the creation of Apache Spark tasks on a cloud platform. A security vulnerability exists in Cloudera Data Engineering CDE version 1.3.0 that stems from a JWT authentication token being exposed t...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

Authentication flaw

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

CVE-2021-3167

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

CVE-2021-3167

In Cloudera Data Engineering (CDE) 1.3.0, the CVE-2021-3167 issue involves JWT authentication tokens being exposed to administrators via virtual cluster server logs. This is a disclosure impacting confidentiality (tokens visible in logs). The available connected documentation confirms the affecte...