CVE-2012-2230

CVE-2012-2230 affects Cloudera Manager 3.7.x (before 3.7.5) and Service/Configuration Manager 3.5 when Kerberos is not enabled. The vulnerability arises from how taskcontroller.cfg is installed, allowing remote authenticated users to impersonate arbitrary user accounts via unspecified vectors (a ...