Cloudera Manager
3 CVEs affecting Cloudera Manager. Latest disclosed: 2017-03-07. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4950 | High | 7.5 | 2017-03-07 | Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions. |
CVE-2016-4949 | High | 7.5 | 2017-03-07 | Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter… |
CVE-2016-4948 | Medium | 6.1 | 2017-03-07 | Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (… |