553 matches found
CVE-2015-4457
CVE-2015-4457 describes multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI prior to version 5.4.3. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The available references consistently state XSS as the impact,...
CVE-2015-6495
This CVE concerns Cloudera Manager prior to version 5.4.6, where the Diagnostic Support Bundles could disclose sensitive information. Multiple sources (NVD, Red Hat, CNVD, CVE lists) confirm an information-disclosure vulnerability affected Cloudera Manager before 5.4.6. Impact centers on confiden...
CVE-2015-6495
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...
CVE-2015-7831
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
CVE-2015-7831
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
CVE-2015-7831
CVE-2015-7831 affects Cloudera Hue with privilege escalation for a read-only user when CDH 5.x before 5.4.9 is used. The NVD entry documents the vulnerability with CVSS 2.0/3.1 scores (base 6.5 and 8.8, respectively) and an attack path described as network-based with low attack complexity and no ...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2016-3131
The CVE-2016-3131 entry concerns Cloudera CDH before 5.6.1, where an authorization bypass is possible via direct internal API calls. Affected software is Cloudera CDH (pre-5.6.1); the root cause is bypass of access control through internal API calls. Documented impact includes potential to elevat...
CVE-2016-3192
CVE-2016-3192 affects Cloudera Manager 5.x before 5.7.1. The vulnerability stems from storing sensitive data in cleartext readable files, enabling potential disclosure. Impact is exposure of sensitive information as stated in multiple records (NVD/Red Hat/CNVD references). The affected product is...
CVE-2016-3192
Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-4572
CVE-2016-4572 affects Cloudera CDH versions prior to 5.7.1, where Impala REVOKE ALL ON SERVER commands fail to revoke all privileges. The risk is that some privileges may remain active for affected roles/services. The connected Red Hat and CNVD entries corroborate the same description. No explici...
CVE-2016-5724
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2016-5724
CVE-2016-5724 affects Cloudera CDH prior to 5.9. The vulnerability is an information disclosure risk in the Diagnostic Support Bundles, allowing a remote attacker to obtain potentially sensitive information from those bundles. The issue is described consistently across connected sources as a flaw...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-6353
CVE-2016-6353 affects Cloudera CDH’s Cloudera Search component. The vulnerability arises in Solr Queries by document ID that can bypass Sentry document-level security via the RealTimeGetHandler, permitting unauthorized access to documents. Affected software is Cloudera CDH with Cloudera Search (p...
PT-2019-8600
Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.8.x through 5.8.4 Cloudera Manager versions 5.9.x through 5.9.1 Cloudera Manager versions 5.10.x through 5.10.0 Description The issue allows a read-only Cloudera Manager user to discover the usernames of other users...
PT-2019-7855
Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.7.x through 5.7.5 Cloudera Manager versions 5.8.x through 5.8.3 Cloudera Manager versions 5.9.x through 5.9.0 Description The issue allows for cross-site scripting XSS in the help search feature. Recommendations For...
