Cloudera Manager Security Vulnerabilities and Issues — Cloudera Manager CVE List

Lucene search

ClouderaCloudera Manager

8 matches found

CVE•added 2019/06/20 7:15 p.m.•150 views

CVE-2018-15913

An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the user to another page in Cloudera Manager once a wizard is completed. The validity of this parameter was not checked. As a result, the user could be autom...

6.1CVSS6.4AI score0.00312EPSS

CVE•added 2019/06/07 3:29 p.m.•56 views

CVE-2018-5798

This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager.

6.1CVSS6AI score0.00312EPSS

CVE•added 2019/07/03 5:15 p.m.•54 views

CVE-2017-9327

Secret data of processes managed by CM is not secured by file permissions.

6.5CVSS6.5AI score0.00247EPSS

CVE•added 2012/04/12 10:45 a.m.•39 views

CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-...

6.5CVSS6.4AI score0.00442EPSS

CVE•added 2019/05/24 5:29 p.m.•36 views

CVE-2018-10815

An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. A read-only user can access sensitive cluster information.

6.5CVSS6.4AI score0.00285EPSS

CVE•added 2021/11/08 1:15 p.m.•31 views

CVE-2021-29243

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.

6.1CVSS6.2AI score0.00458EPSS

CVE•added 2019/11/26 2:15 p.m.•29 views

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.

6.5CVSS6.5AI score0.00189EPSS

CVE•added 2021/11/08 1:15 p.m.•29 views

CVE-2021-32482

Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.

6.1CVSS5.9AI score0.00458EPSS