CVE-2013-6446

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

CVE-2013-6446

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

CVE-2013-6446: Undefined Security Weakness

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

PT-2017-5593

Name of the Vulnerable Software and Affected Versions: Cloudera CDH versions 4.x through 4.5.x Cloudera CDH versions 5.x through 5.0.0 Beta 1 Description: The issue allows remote authenticated users to obtain sensitive job information by leveraging the failure to enforce job ACLs when using...