CVE-2016-4950

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions...

PT-2017-8630

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.5 and earlier Description The issue allows remote attackers to enumerate user sessions. This can be achieved by sending a request to the "api/v11/users/sessions" endpoint. Recommendations For Cloudera Manager versio...