WS-2016-7097

In “Cloudera/Hue”, cdh5.5.0 to cdh5.9.3 and v3.6.0 to v3.11.0 are vulnerable against XSS injection due to an unescaped Solr Data...

WS-2016-7098

In “Cloudera/Hue”, versions 3.10.0 to 3.11.0 and cdh5.7.0-pr1 to cdh5.9.3-release are vulnerable to XSS in the viewmodel options...

cloudera.com XSS vulnerability

Vulnerable URL: http://www.cloudera.com/search.html?q=123=" Details: Description| Value ---|--- Patched:| Yes, at 08.01.2017 Latest check for patch:| 08.01.2017 17:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14030 VIP website status:| Yes Check cloudera.c...

cloudera.com XSS vulnerability

Vulnerable URL: http://www.cloudera.com/partners/solutions.html?fq=tagspartnercategory:Cloud" Details: Description| Value ---|--- Patched:| Yes, at 20.11.2016 Latest check for patch:| 20.11.2016 10:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14041 VIP...

Cloudera Manager Information Disclosure Vulnerability

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. An information disclosure vulnerability exists in Cloudera Manager 5.5 and earlier versions. An attacker can exploit...

Cloudera Manager User Enumeration Vulnerability

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. A user enumeration vulnerability exists in Cloudera Manager. An attacker can exploit the vulnerability to obtain val...

Cloudera Manager has multiple vulnerabilities

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager suffers from HTML injection and cross-site scripting vulnerabilities. An attacker exploiting the...

Cloudera HUE HTML Injection Vulnerability

Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. Cloudera HUE suffers from an HTML injection vulnerability. An attacker can exploit the vulnerability to steal cookie-based authentication and execute arbitrary HTML or script code...

Cloudera HUE User Enumeration Vulnerability

Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. A user enumeration vulnerability exists in Cloudera HUE. A remote attacker can exploit the vulnerability to gain access to the enumerated database users...

WS-2016-7103

In “Cloudera/Hue”, versions 3.6.0 to 3.11.0 and cdh5.0.0-Release to cdh5.8.1-release are vulnerable to XSS in beeswax old editor...

WS-2016-7104

In “Cloudera/Hue”, versions v0.9.1 to v3.10.0, web server information is disclosed in the HTTP request header...

WS-2016-7101

In “Cloudera/Hue”, versions 3.5.0 to 3.10.0 and cdh5.0.0-Release to cdh5.8.5-release are vulnerable to XSS in DBQuery editor...

WS-2016-7100

In “Cloudera/Hue”, versions 3.8.0 to 3.9.0 and cdh5-base-3.8.0 to cdh5-base-3.9.0 are vulnerable to DOM based XSS...

WS-2015-0067

In “Cloudera/Hue”, cdh4.2.0 to cdh5.3.10 and v2.2.0 to v3.7.1 are vulnerable against DOM Based XSS due to unvalidated use of ‘window.location.hash’ and vulnerable version of jQuery...

Cloudera Manager Saving Passwords in Plaintext Vulnerability

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager has a security vulnerability. Since the program stores LDAP binding passwords in plaintext in a...

Default credentials

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

CVE-2014-8733

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

CVE-2014-8733

The CVE-2014-8733 entry concerns Cloudera Manager 5.2.0/5.2.1/5.3.0 in which the LDAP bind password is stored in plaintext in unspecified world-readable files under /etc/hadoop, enabling local attackers to obtain the password. The connected documents provide this exact vulnerability description; ...

CVE-2014-8733

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

PT-2015-4076

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.2.0 through 5.3.0 Description The issue allows local users to obtain the LDAP bind password because it is stored in plaintext in world-readable files under /etc/hadoop. Recommendations For versions 5.2.0 through...