CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

EUVD-2020-28330

Malware in sbrugna...

HPE BlueData EPIC Software Platform and HPE Ezmeral Container Platform Security Vulnerabilities

HPE BlueData EPIC and HPE Ezmeral Container Platform are both products of hpe, USA. hpe BlueData EPIC is software that enables the creation of Hadoop and Spark clusters in virtualized environments. the software combines virtualization with big data to improve team agility. hpe Ezmeral Container...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

Design/Logic Flaw

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

CVE-2020-7196

The CVE concerns HPE BlueData EPIC Software Platform v4.0 and HPE Ezmeral Container Platform v5.0. Root cause: insecure handling of Kerberos credentials, specifically displaying the kdc_admin_password in the source file for the URL path /bdswebui/assignusers/. Impact stated as exposure of sensiti...