PT-2017-8627

Name of the Vulnerable Software and Affected Versions Cloudera HUE versions 3.9.0 and earlier Description The issue allows remote attackers to enumerate user accounts via a request to "desktop/api/users/autocomplete". This enables attackers to gather information about existing user accounts...