553 matches found
PT-2019-7825
Name of the Vulnerable Software and Affected Versions Cloudera CDH versions prior to 5.7.1 Description The issue concerns Impala REVOKE ALL ON SERVER commands in Cloudera CDH, where these commands do not revoke all privileges as expected. Recommendations For versions prior to 5.7.1, update to...
CVE-2016-4572: Incorrect Authorization
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2019-7319: Improper Privilege Management
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges...
PT-2019-7211
Name of the Vulnerable Software and Affected Versions Cloudera Hue versions prior to 5.4.9 Description The issue allows a read-only user to escalate privileges. Recommendations For versions prior to 5.4.9, update to version 5.4.9 or later to resolve the issue...
Cloudera Manager Access Control Error Vulnerability
Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. An Access Control Error vulnerability exists in Cloudera Manager version 5.15 and earlier. The vulnerability arises from the...
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control...
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control...
Design/Logic Flaw
Cloudera Manager through 5.15 has Incorrect Access Control...
CVE-2018-11744
CVE-2018-11744 affects Cloudera Manager up to version 5.15, with an incorrect access control weakness. The CVE entry notes that a remote attacker could exploit this by sending a specially crafted request and, per the vulnerability description, could execute arbitrary code, obtain sensitive inform...
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control...
CVE-2018-11744: Improper Access Control
Cloudera Manager through 5.15 has Incorrect Access Control...
PT-2019-8791
Name of the Vulnerable Software and Affected Versions Cloudera Manager versions prior to 5.16 Description The issue is related to Incorrect Access Control in Cloudera Manager. Recommendations For Cloudera Manager versions prior to 5.16, update to version 5.16 or later to resolve the issue...
Cloudera Data Science Workbench Code Execution Vulnerability
Cloudera Data Science Workbench CDSW is a suite of data science platforms from Cloudera. The platform provides organizations with fast, easy and secure self-service data science support. A security vulnerability exists in Cloudera CDSW 1.3.0 and prior versions. An attacker could exploit the...
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed...
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed...
Design/Logic Flaw
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed...
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed...
CVE-2017-9326
The CVE-2017-9326 issue concerns the Spark History Server keystore password potentially being exposed in unsecured files under /var/run/cloudera-scm-agent (Cloudera Manager managed). The keystore itself is not exposed. Connected sources consistently describe the exposure of the keystore password ...