İçeriğe atla
Noroxi

Cloudera kayıtları

cloudera üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%3,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

52 kayıt
  • CVE-2018-11215
    40Planlayın

    Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

    KritikCVSS 9,8İstismar yokEPSS %2

    cloudera · data science workbench3 Tem 2019

  • CVE-2021-30132
    39İzleyin

    Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudera · cloudera manager8 Kas 2021

  • CVE-2018-20091
    39İzleyin

    An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

    KritikCVSS 9,9İstismar yokEPSS %0

    cloudera · data science workbench7 Haz 2019

  • CVE-2015-4166
    39İzleyin

    Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vecto

    KritikCVSS 9,8İstismar yokEPSS %0

    cloudera · key trustee server23 Mar 2017

  • CVE-2015-7831
    35İzleyin

    In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudera · cdh26 Kas 2019

  • CVE-2017-15536
    35İzleyin

    An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0.

    YüksekCVSS 8,8İstismar yokEPSS %0

    cloudera · data science workbench4 Şub 2018

  • CVE-2017-7399
    35İzleyin

    Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the u

    YüksekCVSS 8,8İstismar yokEPSS %0

    cloudera · cloudera manager26 Kas 2019

  • CVE-2016-4572
    35İzleyin

    In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.

    YüksekCVSS 8,8İstismar yokEPSS %0

    cloudera · cdh26 Kas 2019

  • CVE-2020-26936
    35İzleyin

    Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.

    YüksekCVSS 8,8İstismar yokEPSS %0

    cloudera · data engineering26 Kas 2020

  • CVE-2019-7319
    33İzleyin

    An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0.

    YüksekCVSS 8,3İstismar yokEPSS %1

    cloudera · cdh26 Kas 2019

  • CVE-2018-20090
    33İzleyin

    An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

    YüksekCVSS 8,3İstismar yokEPSS %0

    cloudera · data science workbench26 Kas 2019

  • CVE-2018-11744
    32İzleyin

    Cloudera Manager through 5.15 has Incorrect Access Control.

    YüksekCVSS 8,1İstismar yokEPSS %0

    cloudera · cloudera manager11 Tem 2019

  • CVE-2025-3884
    31İzleyin

    Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · hue21 May 2025

  • CVE-2016-4949
    30İzleyin

    Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · manager7 Mar 2017

  • CVE-2016-4950
    30İzleyin

    Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · manager7 Mar 2017

  • CVE-2016-6605
    30İzleyin

    Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · cdh10 Nis 2017

  • CVE-2016-5724
    30İzleyin

    Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · cdh26 Kas 2019

  • CVE-2015-6495
    30İzleyin

    There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloudera · cloudera manager26 Kas 2019

  • CVE-2017-9325
    30İzleyin

    The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.

    YüksekCVSS 7,5İstismar yokEPSS %0

    cloudera · cdh3 Tem 2019

  • CVE-2017-9326
    30İzleyin

    The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed

    YüksekCVSS 7,5İstismar yokEPSS %0

    cloudera · cloudera manager3 Tem 2019

  • CVE-2018-17860
    28İzleyin

    Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

    YüksekCVSS 7,2İstismar yokEPSS %0

    cloudera · cdh26 Kas 2019

  • CVE-2012-1574
    27İzleyin

    The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2,

    OrtaCVSS 6,5İstismar yokEPSS %4

    apache · hadoop12 Nis 2012

  • CVE-2012-2230
    27İzleyin

    Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskc

    OrtaCVSS 6,5İstismar yokEPSS %1

    cloudera · cloudera manager12 Nis 2012

  • CVE-2014-0229
    26İzleyin

    Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1)

    OrtaCVSS 6,5İstismar yokEPSS %1

    cloudera · cdh23 Mar 2017

  • CVE-2017-9327
    26İzleyin

    Secret data of processes managed by CM is not secured by file permissions.

    OrtaCVSS 6,5İstismar yokEPSS %1

    cloudera · cloudera manager3 Tem 2019