PT-2017-8627

Name of the Vulnerable Software and Affected Versions Cloudera HUE versions 3.9.0 and earlier Description The issue allows remote attackers to enumerate user accounts via a request to "desktop/api/users/autocomplete". This enables attackers to gather information about existing user accounts...

CVE-2016-4947: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete...