Unscored severity · published Jun 10, 2014
CVE-2014-0220
Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cloudera Manager · Cloudera
through 4.8.2; 4.0.1; 4.0.2; 4.0.3; 4.1; 4.1.1; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0220
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0220
packetstormsecurity.com
http://packetstormsecurity.com/files/126956/Cloudera-Manager-4.8.2-5.0.0-Information-Disclosure.html
Vendor Advisory
http://www.cloudera.com/content/cloudera-content/cloudera-docs/SecurityBulletins/Security-Bulletin/csb_topic_2.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/532312/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/67912
More from Cloudera Manager
9.8
CVE-2021-30132
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges
8.8
CVE-2017-7399
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the…
8.1
CVE-2018-11744
Cloudera Manager through 5.15 has Incorrect Access Control
7.5
CVE-2015-6495
There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles
7.5
CVE-2017-9326
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager