EUVD-2013-6253

Malware in sbrugna...

Cloudera CDH Security Bypass Vulnerability

Cloudera CDH is the United States Cloudera company's set of open source for running Apache Hadoop platform. JobHistory Server is one of the history of the task storage , viewing services. A security bypass vulnerability exists in JobHistory Server in Cloudera CDH. A remote attacker could exploit...

Authentication flaw

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

CVE-2013-6446

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

CVE-2013-6446

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

CVE-2013-6446

The CVE concerns the JobHistory Server in Cloudera CDH 4.x prior to 4.6.0 and CDH 5.x prior to 5.0.0 Beta 2. When MRv2/YARN is used with HTTP authentication, remote authenticated users can obtain sensitive job information due to failure to enforce job ACLs. The description does not specify affect...

CVE-2013-6446: Undefined Security Weakness

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs...

PT-2017-5593

Name of the Vulnerable Software and Affected Versions: Cloudera CDH versions 4.x through 4.5.x Cloudera CDH versions 5.x through 5.0.0 Beta 1 Description: The issue allows remote authenticated users to obtain sensitive job information by leveraging the failure to enforce job ACLs when using...