EUVD-2025-22996

Malicious code in bioql PyPI...

CVE-2025-6504

In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range. This vulnerability could be...

CVE-2025-6504

In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range. This vulnerability could be...

CVE-2025-6504 Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header

In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range. This vulnerability could be...

CVE-2025-6504

HDP Server on Linux versions prior to 4.6.2.2978 is vulnerable to IP-spoofing via the X-Forwarded-For header. Because XFF is client-controlled, a spoofed address that matches a whitelisted range can bypass IP-based access controls, potentially allowing unauthorized access. Exploitation still requ...

CVE-2025-6504 Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header

In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header. Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range. This vulnerability could be...

PT-2025-31200 · Cloudera · Hdp Server

Name of the Vulnerable Software and Affected Versions: HDP Server versions prior to 4.6.2.2978 Description: HDP Server is susceptible to unauthorized access due to IP spoofing via the X-Forwarded-For header. The X-Forwarded-For header, being client-controlled, can be manipulated. If a spoofed IP...