) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
Search Parameters:
- Keyword (text search): cpe:2.3:a:cloudera:cdh:4.1.4:*:*:*:*:*:*:*
- CPE Name Search: true
There are 3 matching records.
Displaying matches 1 through 3.
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2016-5724 |
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. Published: November 26, 2019; 9:15:11 AM -0500 |
V4.0:(not available) V3.1: 7.5 HIGH V2.0: 5.0 MEDIUM |
| CVE-2017-9325 |
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs. Published: July 03, 2019; 1:15:09 PM -0400 |
V4.0:(not available) V3.0: 7.5 HIGH V2.0: 6.4 MEDIUM |
| CVE-2013-6446 |
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs. Published: March 23, 2017; 4:59:00 PM -0400 |
V4.0:(not available) V3.0: 3.1 LOW V2.0: 3.5 LOW |