305 matches found
WS-2016-7097
In “Cloudera/Hue”, cdh5.5.0 to cdh5.9.3 and v3.6.0 to v3.11.0 are vulnerable against XSS injection due to an unescaped Solr Data...
WS-2016-7098
In “Cloudera/Hue”, versions 3.10.0 to 3.11.0 and cdh5.7.0-pr1 to cdh5.9.3-release are vulnerable to XSS in the viewmodel options...
WS-2016-7095
Hue versions 3.10.0 to 3.11.0 and cdh5.7.0-pr1 to cdh5.9.3-release is vulnerable to XSS in the viewmodel options...
WS-2016-7096
Hue versions 3.6.0 to 3.11.0 and cdh5.0.0-release to cdh5.9.3-release is vulnerable to open redirect in onsuccessurl...
WS-2016-7099
Hue versions 3.6.0 to 3.11.0 and cdh5.0.0-release to cdh5.9.3-release is vulnerable to open redirect in onsuccessurl...
Cloudera HUE HTML Injection Vulnerability
Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. Cloudera HUE suffers from an HTML injection vulnerability. An attacker can exploit the vulnerability to steal cookie-based authentication and execute arbitrary HTML or script code...
Cloudera HUE User Enumeration Vulnerability
Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. A user enumeration vulnerability exists in Cloudera HUE. A remote attacker can exploit the vulnerability to gain access to the enumerated database users...
WS-2016-7094
Hue versions cdh5.4.0-rc1 to cdh5.8.5-release and release-3.8.0 to release-3.11.0 is vulnerable to XSS when hovering on saved query description...
WS-2016-7103
In “Cloudera/Hue”, versions 3.6.0 to 3.11.0 and cdh5.0.0-Release to cdh5.8.1-release are vulnerable to XSS in beeswax old editor...
WS-2016-7104
In “Cloudera/Hue”, versions v0.9.1 to v3.10.0, web server information is disclosed in the HTTP request header...
WS-2016-7101
In “Cloudera/Hue”, versions 3.5.0 to 3.10.0 and cdh5.0.0-Release to cdh5.8.5-release are vulnerable to XSS in DBQuery editor...
WS-2016-7100
In “Cloudera/Hue”, versions 3.8.0 to 3.9.0 and cdh5-base-3.8.0 to cdh5-base-3.9.0 are vulnerable to DOM based XSS...
Talk to HUE Trial - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Talk to HUE Trial published at the 'play' market has multiple vulnerabilities...
WS-2015-0066
Hue versions cdh5-base-3.7.0 to cdh5-base-3.9.0, cdh5.4.0-rc1 to cdh5.4.9-release and release-2.3.0 to release-3.9.0 is vulnerable to XSS in jHueNotify and UserAdmin...
Hue /usr/lib/hue/build/env/bin/supervisor insecure privilege setting vulnerability
Hue is an open source Apache Hadoop UI system. Hue /usr/lib/hue/build/env/bin/supervisor fails to set permissions correctly, allowing a local attacker to exploit a vulnerability to elevate privileges...
WS-2015-0067
In “Cloudera/Hue”, cdh4.2.0 to cdh5.3.10 and v2.2.0 to v3.7.1 are vulnerable against DOM Based XSS due to unvalidated use of ‘window.location.hash’ and vulnerable version of jQuery...
WS-2014-0046
In “Cloudera/Hue”, in cdh4.5.0 to cdh5.3.10 and release-3.5.0 to release-3.7.1, there is an open redirection vulnerability. An attacker can manipulate the '?next=' parameter and once a user successfully logins to the site, there will be a redirection to the attacker’s site...
WS-2014-0051
In “Cloudera/Hue”, versions v0.9.1 to v3.7.1 and cdh5-base-2.3.0 to cdh5-base-3.7.0 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via POODLE attack...