Lucene search
RootSSV:93012HistoryApr 24, 2017 - 12:00 a.m.
Cloudera HUE =< 3.9.0 Enumerating users with an unprivileged account (CVE-2016-4947)
2017-04-2400:00:00
Root
www.seebug.org
19
0.002 Low
EPSS
Percentile
54.9%
Cloudera HUE =< 3.9.0 is vulnerable to an access control issue allowing an unprivileged user to enumerate registered users with the following GET request:
http://<cloudera_HUE_IP>/desktop/api/users/autocomplete
Open redirection
Cloudera HUE =< 3.9.0 is vulnerable to an open redirection in the hidden next parameter of the login form:
http://<cloudera_HUE_IP>:8888/accounts/login/?next=//google.fr
Related
osv
osv
CVE-2016-4947
2017-03-07 16:59:00
Cloudera HUE Account Enumeration
2022-05-17 02:56:17
github
github
Cloudera HUE Account Enumeration
2022-05-17 02:56:17
prion
prion
Cross site request forgery (csrf)
2017-03-07 16:59:00
nvd
nvd
CVE-2016-4947
2017-03-07 16:59:00
cve
cve
CVE-2016-4947
2017-03-07 16:59:00
cvelist
cvelist
CVE-2016-4947
2017-03-07 16:00:00