Cloudera Cdh
11 CVEs affecting Cloudera Cdh. Latest disclosed: 2019-11-26. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4572 | High | 8.8 | 2019-11-26 | In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. |
CVE-2015-7831 | High | 8.8 | 2019-11-26 | In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used. |
CVE-2019-7319 | High | 8.3 | 2019-11-26 | An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend… |
CVE-2016-5724 | High | 7.5 | 2019-11-26 | Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. |
CVE-2017-9325 | High | 7.5 | 2019-07-03 | The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs. |
CVE-2016-6605 | High | 7.5 | 2017-04-10 | Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. |
CVE-2018-17860 | High | 7.2 | 2019-11-26 | Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1. |
CVE-2016-6353 | Medium | 6.5 | 2019-11-26 | Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the R… |
CVE-2016-3131 | Medium | 6.5 | 2019-11-26 | Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. |
CVE-2014-0229 | Medium | 6.5 | 2017-03-23 | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes… |
CVE-2013-6446 | Low | 3.1 | 2017-03-23 | The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated… |