61 matches found
Improper Authentication in Apache Hadoop
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the 1 refreshNamenodes, 2 deleteBlockPool, and 3 shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service DataNode...
cdh-westfalen-mitte.de Improper Access Control vulnerability OBB-2405501
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cloudera Manager incorrect access control vulnerability
Cloudera Manager is an end-to-end application for managing CDH clusters.An incorrect access control vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit the vulnerability to elevate privileges and view restricted dashboards...
Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2021-103108)
Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. are vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via path parameters...
Cloudera Manager Authorization Bypass Vulnerability
Cloudera Manager is an end-to-end application for managing CDH clusters.An authorization bypass vulnerability exists in Cloudera Manager version 7.2.4. An attacker could exploit this vulnerability to elevate privileges...
Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2021-103106)
Cloudera Manager is an end-to-end application for managing CDH clusters.Cloudera Manager versions 5., 6., 7.1., 7.2., and 7.3. contain a cross-site scripting vulnerability. An attacker could use this vulnerability to launch an xss attack...
Unspecified vulnerability in Cloudera CDH (CNVD-2020-14228)
Cloudera CDH is an open source Hadoop platform from Cloudera. The platform provides scalable storage and distributed computing, as well as a Web-based user interface and other enterprise features. A security vulnerability exists in Cloudera CDH versions prior to 5.6.1. An attacker could exploit t...
CVE-2018-17860
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2016-5724
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2015-7831
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
Design/Logic Flaw
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
Authorization
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
Command injection
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
Privilege escalation
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
Information disclosure
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2018-17860
Technical details about CVE-2018-17860 are not publicly available in the provided connected documents. The initial description only notes insecure permissions in Cloudera CDH across certain versions. Monitor for updates.
