CVE-2021-3167: Insertion of Sensitive Information into Log File

In Cloudera Data Engineering CDE 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs...

PT-2021-19472

Name of the Vulnerable Software and Affected Versions Cloudera Data Engineering version 1.3.0 Description The issue concerns the exposure of JWT authentication tokens to administrators in virtual cluster server logs. This affects Cloudera Data Engineering, where sensitive information is...

Cloudera Data Engineering 信息泄露漏洞

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, USA that supports the creation of Apache Spark tasks on a cloud platform. A security vulnerability exists in Cloudera Data Engineering CDE version 1.3.0 that stems from a JWT authentication token being exposed t...

Cloudera Data Engineering Cross-Site Request Forgery Vulnerability

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, Inc. that supports the creation of Apache Spark tasks on a cloud platform. A cross-site request forgery vulnerability exists in Cloudera Data Engineering versions prior to 1.1, which stems from vulnerability to...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

Cross site request forgery (csrf)

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

CVE-2020-26936

CVE-2020-26936 concerns Cloudera Data Engineering (CDE) before version 1.1, where a Cross-Site Request Forgery (CSRF) vulnerability exists. The provided documents identify the affected product and the vulnerability type but do not include detailed technical exploit steps, affected endpoints, or r...

PT-2020-16559

Name of the Vulnerable Software and Affected Versions Cloudera Data Engineering CDE versions prior to 1.1 Description The issue concerns a CSRF attack. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

Cloudera Data Engineering 跨站请求伪造漏洞

Cloudera Data Engineering is a service-less architecture cloud service from Cloudera, Inc. that supports the creation of Apache Spark tasks on a cloud platform. A cross-site request forgery vulnerability exists in Cloudera Data Engineering versions prior to 1.1, which stems from vulnerability to...

CVE-2020-26936: Cross-Site Request Forgery (CSRF)

Cloudera Data Engineering CDE before 1.1 was vulnerable to a CSRF attack...

issues.cloudera.org Cross Site Scripting vulnerability OBB-1488687

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WS-2020-0220

In “Cloudera/Hue”, versions v4.5.0 to v4.7.1 is vulnerable to XSS attack in Share Document UI...

WS-2019-0499

In “Cloudera/Hue”,v0.9.1 to v4.6.0 and cdh-base-1.2.0 to cdh6.3.3-release, the renegotiation is not disabled for TLS v1.0, thus affected by SSL and TLS renegotiation vulnerability, that allows an attacker to send arbitrary requests to the victim...

Unspecified Vulnerability in Cloudera Hue

Cloudera Hue is an open source web-based interactive query editor from Cloudera for visualizing and sharing data. A security vulnerability exists in Cloudera Hue versions 6.0.0 through 6.1.0. An attacker could exploit the vulnerability to gain superuser privileges...

Cloudera Manager Cross-Site Scripting Vulnerability

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A cross-site scripting vulnerability exists in the Help Query feature in Cloudera Manager versions 5.7.x before 5.7.6, 5.8.x...

Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2020-14237)

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A cross-site scripting vulnerability exists in Cloudera Manager versions prior to 5.4.3. The vulnerability stems from the WEB...

Unspecified Vulnerability in Cloudera Manager

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A security vulnerability exists in version 5.x of Cloudera Manager prior to 5.7.1. An attacker could exploit the vulnerability...

Unspecified vulnerability in Cloudera CDH (CNVD-2020-14228)

Cloudera CDH is an open source Hadoop platform from Cloudera. The platform provides scalable storage and distributed computing, as well as a Web-based user interface and other enterprise features. A security vulnerability exists in Cloudera CDH versions prior to 5.6.1. An attacker could exploit t...