CVE-2014-0220

CVE-2014-0220 affects Cloudera Manager versions prior to 4.8.3 and prior to 5.0.1 in the 5.x line. The vulnerability is an information disclosure via the API, where remote authenticated users can obtain sensitive configuration values. The issue is tied to API access controls that fail to redact o...