Details for CVE-2014-0220

------------------------------------------------------------------------------------------ Technical Service Bulletin 2014-28 TSB Title: Security Vulnerability: Sensitive Configuration Values Exposed in Cloudera Manager Certain configuration values that are stored in Cloudera Manager are consider...

Cloudera Manager information disclosure

Sensitive configuration information disclosure via API...

CVE-2014-0220

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...

Design/Logic Flaw

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...

CVE-2014-0220

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...

CVE-2014-0220

CVE-2014-0220 affects Cloudera Manager versions prior to 4.8.3 and prior to 5.0.1 in the 5.x line. The vulnerability is an information disclosure via the API, where remote authenticated users can obtain sensitive configuration values. The issue is tied to API access controls that fail to redact o...

CVE-2014-0220: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API...

[CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Users of Apache Hadoop should be aware of a security vulnerability recently discovered, as described by the following CVE. In particular, please note the "Users affected", "Versions affected", and "Mitigation" sections. The project team will be...

CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2012-1574

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

Code injection

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2012-2230

CVE-2012-2230 affects Cloudera Manager 3.7.x (before 3.7.5) and Service/Configuration Manager 3.5 when Kerberos is not enabled. The vulnerability arises from how taskcontroller.cfg is installed, allowing remote authenticated users to impersonate arbitrary user accounts via unspecified vectors (a ...

CVE-2012-1574

CVE-2012-1574 affects Apache Hadoop’s Kerberos/MapReduce security, enabling remote authenticated users to impersonate arbitrary cluster user accounts. Affected versions include Hadoop 0.20.203.0–0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2 (as deployed in Cloudera CDH CDH3u0–CDH3u2, a...

CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

CVE-2012-1574: Undefined Security Weakness

The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...

CVE-2012-2230: Undefined Security Weakness

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than...

Apache Hadoop 未明用户扮演漏洞(CVE-2012-1574)

Bugtraq ID: 52939 CVE ID：CVE-2012-1574 Apache Hadoop是一款设计用来在由通用计算设备组成的大型集群上执行分布式应用的框架 Apache Hadoop存在一个未明安全漏洞，允许恶意用户扮演其他用户。要成功利用漏洞需要目标用户使用了Kerberos / MapReduce安全特性 0 Cloudera Cloudera Manager 3.7.4 Cloudera Cloudera Manager 3.7 Apache Software Foundation Hadoop 1.0.1 Apache Software Foundation...