Unscored severity · published Apr 12, 2012
CVE-2012-2230
Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cloudera Manager · Cloudera
3.7.0; 3.7.0; 3.7.1; 3.7.1; 3.7.2; 3.7.2; +4 more · source: NVD
CS
Cloudera Service And Configuration Manager · Cloudera
3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2230
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2230
secunia.com
http://secunia.com/advisories/48776
ccp.cloudera.com
https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74823
More from Cloudera Manager
9.8
CVE-2021-30132
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges
8.8
CVE-2017-7399
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the…
8.1
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control
7.5
CVE-2015-6495
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles
7.5
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager