CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

EUVD-2020-28330

Malware in sbrugna...

HPE BlueData EPIC Software Platform and HPE Ezmeral Container Platform Security Vulnerabilities

HPE BlueData EPIC and HPE Ezmeral Container Platform are both products of hpe, USA. hpe BlueData EPIC is software that enables the creation of Hadoop and Spark clusters in virtualized environments. the software combines virtualization with big data to improve team agility. hpe Ezmeral Container...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

Design/Logic Flaw

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

CVE-2020-7196

The CVE concerns HPE BlueData EPIC Software Platform v4.0 and HPE Ezmeral Container Platform v5.0. Root cause: insecure handling of Kerberos credentials, specifically displaying the kdc_admin_password in the source file for the URL path /bdswebui/assignusers/. Impact stated as exposure of sensiti...

CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

PT-2020-19456

Name of the Vulnerable Software and Affected Versions HPE BlueData EPIC Software Platform version 4.0 HPE Ezmeral Container Platform version 5.0 Description The issue concerns an insecure method of handling sensitive Kerberos passwords, making them susceptible to unauthorized interception and/or...

CVE-2020-7196: Exposure of Sensitive Information to an Unauthorized Actor

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

HPESBGN04049 rev.1 - HPE BlueData EPIC Software Platform and HPE Ezmeral Container Platform, Remote Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. BlueData EPIC Software 4.0 and earlier HPE Ezmeral Container Platform 5.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7196 |...