3 matches found
CVE-2017-9327
Secret data of processes managed by CM is not secured by file permissions.
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control.