6.5

CVE-2012-2230

EPSS 1.87%
Veröffentlicht 12.04.2012 10:45:14
Zuletzt bearbeitet 16.06.2026 23:41:12
Erkennungen
Login

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 11 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cloudera ≫ Cloudera Manager Version 3.7.0 Edition enterprise

Cloudera ≫ Cloudera Manager Version 3.7.0 Edition free

Cloudera ≫ Cloudera Manager Version 3.7.1 Edition enterprise

Cloudera ≫ Cloudera Manager Version 3.7.1 Edition free

Cloudera ≫ Cloudera Manager Version 3.7.2 Edition enterprise

Cloudera ≫ Cloudera Manager Version 3.7.2 Edition free

Cloudera ≫ Cloudera Manager Version 3.7.3 Edition enterprise

Cloudera ≫ Cloudera Manager Version 3.7.3 Edition free

Cloudera ≫ Cloudera Manager Version 3.7.4 Edition enterprise

Cloudera ≫ Cloudera Manager Version 3.7.4 Edition free

Cloudera ≫ Cloudera Service And Configuration Manager Version 3.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.87%	0.776

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/48776

https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin

https://exchange.xforce.ibmcloud.com/vulnerabilities/74823

https://nvd.nist.gov/vuln/detail/CVE-2012-2230

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2230

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2230

EUVD