TI-2019-05206 CVE-2019-7319 · GHSA-g479-c966-m99h
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0.
Priority LOW 38
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0.
Vulnerabilities
11 records
TI-2018-12696 CVE-2018-17860 · GHSA-wc9g-6j64-h5vw
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x…
Priority LOW 33
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.
TI-2015-06506 CVE-2015-7831 · GHSA-558h-hw8g-9x57
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.
Priority MEDIUM 40
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.
TI-2016-02625 CVE-2016-3131 · GHSA-2424-v4cf-7rr6
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
Priority LOW 30
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
TI-2016-03937 CVE-2016-4572 · GHSA-8p8c-cxfr-wq57
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
Priority MEDIUM 40
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
TI-2016-04968 CVE-2016-5724 · GHSA-5x59-c34p-cff9
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
Priority LOW 35
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
TI-2016-05441 CVE-2016-6353 · GHSA-xfq9-m5c5-8p4q
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr…
Priority LOW 30
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.
TI-2017-06754 CVE-2017-9325 · GHSA-f9rj-ph86-rg7m
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
Priority LOW 34
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
TI-2016-05655 CVE-2016-6605 · GHSA-hvcq-wqg4-xggp
Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.
Priority LOW 36
Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.
TI-2014-00222 CVE-2014-0229 · GHSA-9r7g-325h-mxrm
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x…
Priority LOW 32
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin comm…
TI-2013-05399 CVE-2013-6446 · GHSA-wwhw-vwhw-7mxv
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when…
Priority LOW 17
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failu…