Vendors / Cloudera Records 51 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 17
Exploited now Cloudera records in CISA KEV No Cloudera vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00861 · Published 2019-11-26 · No fix listed CWE-863
Priority MEDIUM 40
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01078 · Published 2019-11-26 · No fix listed CWE-269
Priority LOW 38
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0.
CVSS 3.1 HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01023 · Published 2019-11-26 · No fix listed CWE-269
Priority LOW 36
Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0136 · Published 2017-04-10 · No fix listed CWE-284
Priority LOW 35
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01234 · Published 2019-11-26 · No fix listed CWE-200
Priority LOW 34
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2019-07-03 · No fix listed CWE-285
Priority LOW 33
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00952 · Published 2019-11-26 · No fix listed CWE-276
Priority LOW 32
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin comm…
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01605 · Published 2017-03-23 · Fixed in 0.23.11, 2.4.1 CWE-264
Priority LOW 30
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00751 · Published 2019-11-26 · No fix listed CWE-863
Priority LOW 30
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00667 · Published 2019-11-26 · No fix listed CWE-863
Priority LOW 17
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failu…
CVSS 3.0 LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00875 · Published 2017-03-23 · No fix listed CWE-264
Open these records in search → All records by CVSS severity
4 17 26 4 0
THREATIST.IORead the docs