CVE-2016-4950

CVE-2016-4950 affects Cloudera Manager 5.5 and earlier. A remote attacker could enumerate user sessions by calling /api/v11/users/sessions, exposing active sessions information. Public descriptions confirm the issue is an access-control flaw in the sessions API. The IBM security bulletin maps CVS...