Cloudera Manager vulnerabilities

• cloudera manager Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view... CVE-2021-32483 5.3 MediumNovember 8, 2021
• cloudera manager Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. CVE-2021-30132 9.8 CriticalNovember 8, 2021
• cloudera manager Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS. CVE-2021-29243 6.1 MediumNovember 8, 2021
• cloudera manager Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter. CVE-2021-32482 6.1 MediumNovember 8, 2021
• cloudera manager An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x... CVE-2019-14449 5.4 MediumNovember 26, 2019
• cloudera manager Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the... CVE-2016-9271 5.4 MediumNovember 26, 2019
• cloudera manager Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read... CVE-2017-7399 8.8 HighNovember 26, 2019
• cloudera manager Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow... CVE-2015-4457 5.4 MediumNovember 26, 2019
• cloudera manager There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles. CVE-2015-6495 7.5 HighNovember 26, 2019
• cloudera manager Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. CVE-2016-3192 6.5 MediumNovember 26, 2019
• cloudera manager Cloudera Manager through 5.15 has Incorrect Access Control. CVE-2018-11744 8.1 HighJuly 11, 2019
• cloudera manager The keystore password for the Spark History Server may be exposed in unsecured files under the ... CVE-2017-9326 7.5 HighJuly 3, 2019
• cloudera manager Secret data of processes managed by CM is not secured by file permissions. CVE-2017-9327 6.5 MediumJuly 3, 2019
• cloudera manager An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera... CVE-2018-15913 6.1 MediumJune 20, 2019
• cloudera manager This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager. CVE-2018-5798 6.1 MediumJune 7, 2019
• cloudera navigator key trustee kms, manager +1 more In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote... CVE-2018-6185 4.9 MediumJune 7, 2019
• cloudera manager An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x... CVE-2018-10815 6.5 MediumMay 24, 2019
• cloudera navigator, manager +1 more Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when... CVE-2015-4078 3.1 LowMarch 23, 2017
• cloudera manager Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x... CVE-2015-2263 3.3 LowMarch 23, 2017
• cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request... CVE-2016-4950 7.5 HighMarch 7, 2017
• cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1... CVE-2016-4949 7.5 HighMarch 7, 2017
• cloudera manager Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow... CVE-2016-4948 6.1 MediumMarch 7, 2017
• cloudera manager Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in... CVE-2014-8733 2.1 LowFebruary 10, 2015
• cloudera manager Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain... CVE-2014-0220 4.0 MediumJune 10, 2014
• cloudera manager, service and configuration manager +1 more Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is... CVE-2012-2230 6.5 MediumApril 12, 2012