429 matches found
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-4572
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2016-6353
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
CVE-2015-7831
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
CVE-2016-5724
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2015-6495
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...
Design/Logic Flaw
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler...
Design/Logic Flaw
Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...
Information disclosure
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles...
Privilege escalation
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used...
Authorization
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
Command injection
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
Information disclosure
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles...
CVE-2018-17860
Technical details about CVE-2018-17860 are not publicly available in the provided connected documents. The initial description only notes insecure permissions in Cloudera CDH across certain versions. Monitor for updates.
CVE-2018-17860
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1...
CVE-2015-4457
CVE-2015-4457 describes multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI prior to version 5.4.3. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The available references consistently state XSS as the impact,...