Cloudera

Cdh

11 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.3

CVE-2019-7319

  • EPSS 0.59%
  • Published 26.11.2019 16:15:14
  • Last modified 21.11.2024 04:48:00

An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are ...

7.2

CVE-2018-17860

  • EPSS 0.28%
  • Published 26.11.2019 15:15:11
  • Last modified 21.11.2024 03:55:04

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

8.8

CVE-2015-7831

  • EPSS 0.35%
  • Published 26.11.2019 14:15:11
  • Last modified 21.11.2024 02:37:29

In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.

6.5

CVE-2016-3131

  • EPSS 0.15%
  • Published 26.11.2019 14:15:11
  • Last modified 21.11.2024 02:49:26

Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.

8.8

CVE-2016-4572

  • EPSS 0.35%
  • Published 26.11.2019 14:15:11
  • Last modified 21.11.2024 02:52:31

In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.

7.5

CVE-2016-5724

  • EPSS 0.4%
  • Published 26.11.2019 14:15:11
  • Last modified 21.11.2024 02:54:53

Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.

6.5

CVE-2016-6353

  • EPSS 0.18%
  • Published 26.11.2019 14:15:11
  • Last modified 21.11.2024 02:55:57

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

7.5

CVE-2017-9325

  • EPSS 0.2%
  • Published 03.07.2019 17:15:09
  • Last modified 21.11.2024 03:35:49

The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.

7.5

CVE-2016-6605

  • EPSS 0.21%
  • Published 10.04.2017 14:59:00
  • Last modified 20.04.2025 01:37:25

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

3.5

CVE-2013-6446

  • EPSS 0.21%
  • Published 23.03.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs.