Vulnerabilities (CVE)

Filtered by vendor Cloudera Subscribe
Filtered by product Cloudera Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-7399 1 Cloudera 1 Cloudera Manager 2019-12-04 6.5 MEDIUM 8.8 HIGH
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.
CVE-2015-6495 1 Cloudera 1 Cloudera Manager 2019-12-03 5.0 MEDIUM 7.5 HIGH
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.
CVE-2018-11744 1 Cloudera 1 Cloudera Manager 2019-07-18 6.8 MEDIUM 8.1 HIGH
Cloudera Manager through 5.15 has Incorrect Access Control.
CVE-2017-9326 1 Cloudera 1 Cloudera Manager 2019-07-11 3.5 LOW 7.5 HIGH
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.