CVE-2015-6495

There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...

CVE-2015-7831

In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...

CVE-2015-7831

CVE-2015-7831 affects Cloudera Hue with privilege escalation for a read-only user when CDH 5.x before 5.4.9 is used. The NVD entry documents the vulnerability with CVSS 2.0/3.1 scores (base 6.5 and 8.8, respectively) and an attack path described as network-based with low attack complexity and no ...

CVE-2016-3131

Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...

CVE-2016-3131

The CVE-2016-3131 entry concerns Cloudera CDH before 5.6.1, where an authorization bypass is possible via direct internal API calls. Affected software is Cloudera CDH (pre-5.6.1); the root cause is bypass of access control through internal API calls. Documented impact includes potential to elevat...

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

CVE-2016-3192

CVE-2016-3192 affects Cloudera Manager 5.x before 5.7.1. The vulnerability stems from storing sensitive data in cleartext readable files, enabling potential disclosure. Impact is exposure of sensitive information as stated in multiple records (NVD/Red Hat/CNVD references). The affected product is...

CVE-2016-4572

CVE-2016-4572 affects Cloudera CDH versions prior to 5.7.1, where Impala REVOKE ALL ON SERVER commands fail to revoke all privileges. The risk is that some privileges may remain active for affected roles/services. The connected Red Hat and CNVD entries corroborate the same description. No explici...

CVE-2016-4572

In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...

CVE-2016-5724

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...

CVE-2016-5724

CVE-2016-5724 affects Cloudera CDH prior to 5.9. The vulnerability is an information disclosure risk in the Diagnostic Support Bundles, allowing a remote attacker to obtain potentially sensitive information from those bundles. The issue is described consistently across connected sources as a flaw...

CVE-2016-6353

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...

CVE-2016-6353

CVE-2016-6353 affects Cloudera CDH’s Cloudera Search component. The vulnerability arises in Solr Queries by document ID that can bypass Sentry document-level security via the RealTimeGetHandler, permitting unauthorized access to documents. Affected software is Cloudera CDH with Cloudera Search (p...

Cloudera Manager Access Control Error Vulnerability

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. An Access Control Error vulnerability exists in Cloudera Manager version 5.15 and earlier. The vulnerability arises from the...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

Design/Logic Flaw

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2018-11744

Cloudera Manager through 5.15 has Incorrect Access Control...

CVE-2018-11744

CVE-2018-11744 affects Cloudera Manager up to version 5.15, with an incorrect access control weakness. The CVE entry notes that a remote attacker could exploit this by sending a specially crafted request and, per the vulnerability description, could execute arbitrary code, obtain sensitive inform...

Cloudera Data Science Workbench Code Execution Vulnerability

Cloudera Data Science Workbench CDSW is a suite of data science platforms from Cloudera. The platform provides organizations with fast, easy and secure self-service data science support. A security vulnerability exists in Cloudera CDSW 1.3.0 and prior versions. An attacker could exploit the...