429 matches found
Cloudera HUE HTML Injection Vulnerability
Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. Cloudera HUE suffers from an HTML injection vulnerability. An attacker can exploit the vulnerability to steal cookie-based authentication and execute arbitrary HTML or script code...
Cloudera Manager Information Disclosure Vulnerability
Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. An information disclosure vulnerability exists in Cloudera Manager 5.5 and earlier versions. An attacker can exploit...
Cloudera Manager has multiple vulnerabilities
Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager suffers from HTML injection and cross-site scripting vulnerabilities. An attacker exploiting the...
Cloudera HUE User Enumeration Vulnerability
Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. A user enumeration vulnerability exists in Cloudera HUE. A remote attacker can exploit the vulnerability to gain access to the enumerated database users...
Cloudera Manager Saving Passwords in Plaintext Vulnerability
Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager has a security vulnerability. Since the program stores LDAP binding passwords in plaintext in a...
Default credentials
Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...
CVE-2014-8733
Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...
CVE-2014-8733
Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...
CVE-2014-8733
The CVE-2014-8733 entry concerns Cloudera Manager 5.2.0/5.2.1/5.3.0 in which the LDAP bind password is stored in plaintext in unspecified world-readable files under /etc/hadoop, enabling local attackers to obtain the password. The connected documents provide this exact vulnerability description; ...
Cloudera Manager Detection
The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Cloudera Manager < 4.8.3 Information Disclosure Vulnerability
Cloudera Manager is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cloudera Manager Default Credentials
The Cloudera Manager web application running on the remote web server uses default credentials for the administrator account. An attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Cloudera Manager Unsupported Version Detection
According to its self-reported version, the Cloudera Manager web application running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...
Cloudera Manager < 4.8.3 / 5.x < 5.0.1 Information Disclosure
The version of Cloudera Manager running on the remote host is prior to 4.8.3 or else 5.x prior to 5.0.1. It is, therefore, affected by an information disclosure vulnerability because the API fails to properly restrict access to sensitive data by non-administrator users. A low privilege user can...
Cloudera Manager Detection
Binary data clouderamanagerdetect.nbin...
Details for CVE-2014-0220
------------------------------------------------------------------------------------------ Technical Service Bulletin 2014-28 TSB Title: Security Vulnerability: Sensitive Configuration Values Exposed in Cloudera Manager Certain configuration values that are stored in Cloudera Manager are consider...
Cloudera Manager information disclosure
Sensitive configuration information disclosure via API...
CVE-2014-0220
Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...