PT-2014-3543

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions prior to 4.8.3 Cloudera Manager versions 5.x prior to 5.0.1 Description The issue allows remote authenticated users to obtain sensitive configuration information. This is achieved via the API. Recommendations For...

[CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Users of Apache Hadoop should be aware of a security vulnerability recently discovered, as described by the following CVE. In particular, please note the "Users affected", "Versions affected", and "Mitigation" sections. The project team will be...

CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2012-1574

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

Code injection

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2012-2230

CVE-2012-2230 affects Cloudera Manager 3.7.x (before 3.7.5) and Service/Configuration Manager 3.5 when Kerberos is not enabled. The vulnerability arises from how taskcontroller.cfg is installed, allowing remote authenticated users to impersonate arbitrary user accounts via unspecified vectors (a ...

CVE-2012-1574

CVE-2012-1574 affects Apache Hadoop’s Kerberos/MapReduce security, enabling remote authenticated users to impersonate arbitrary cluster user accounts. Affected versions include Hadoop 0.20.203.0–0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2 (as deployed in Cloudera CDH CDH3u0–CDH3u2, a...

CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

PT-2012-3894

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 3.7.x through 3.7.4 Cloudera Service and Configuration Manager version 3.5 Description The issue arises when Kerberos is not enabled, leading to improper installation of taskcontroller.cfg. This allows remote...

CVE-2012-1574: Undefined Security Weakness

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

CVE-2012-2230: Undefined Security Weakness

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

PT-2012-3349

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions 0.20.203.0 through 0.20.205.0 Apache Hadoop versions 0.23.x before 0.23.2 Apache Hadoop versions 1.0.x before 1.0.2 Cloudera CDH versions CDH3u0 through CDH3u2 Cloudera hadoop-0.20-sbin versions before 0.20.2+923.197...

Apache Hadoop 未明用户扮演漏洞(CVE-2012-1574)

Bugtraq ID: 52939 CVE ID：CVE-2012-1574 Apache Hadoop是一款设计用来在由通用计算设备组成的大型集群上执行分布式应用的框架 Apache Hadoop存在一个未明安全漏洞，允许恶意用户扮演其他用户。要成功利用漏洞需要目标用户使用了Kerberos / MapReduce安全特性 0 Cloudera Cloudera Manager 3.7.4 Cloudera Cloudera Manager 3.7 Apache Software Foundation Hadoop 1.0.1 Apache Software Foundation...