553 matches found
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2015-7831
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
CVE-2016-3192
Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...
CVE-2016-5724
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2015-6495
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...
Authorization
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
Design/Logic Flaw
Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...
Command injection
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
Information disclosure
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
Privilege escalation
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
Information disclosure
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...
Design/Logic Flaw
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2018-17860
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1...
CVE-2018-17860
Technical details about CVE-2018-17860 are not publicly available in the provided connected documents. The initial description only notes insecure permissions in Cloudera CDH across certain versions. Monitor for updates.