Login Request a demo
CD
Product
Cdh
by Cloudera · last CVE Nov 26, 2019
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 7Medium 3Low 1
Severity
All severities11Critical0High7Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cdh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4572
8.8
1%
Nov 26
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges
Affected: 5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; 5.6.0; +2 more
CVE-2015-7831
8.8
1%
Nov 26
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used
Affected: 5.0.0 before 5.4.9
CVE-2019-7319
8.3
1%
Nov 26
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0
Affected: 6.0.0; 6.0.1; 6.1.0
CVE-2016-5724
7.5
1%
Nov 26
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles
Affected: before 5.9.0
CVE-2017-9325
7.5
1%
Jul 3
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs
Affected: through 5.8.0; 5.8.2 through 5.9.2; 5.10.0 through 5.10.1; 5.11.0 through 5.11.1
CVE-2016-6605
7.5
1%
Apr 10
Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization
Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +34 more
CVE-2018-17860
7.2
1%
Nov 26
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1
Affected: 5.0.0 through 5.14.0; 5.15.0; 5.15.1; 6.0.0; 6.0.1
CVE-2016-6353
6.5
1%
Nov 26
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler
Affected: 5.0.0 before 5.7.0
CVE-2016-3131
6.5
1%
Nov 26
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls
Affected: 5.0.0 before 5.3.10; 5.4.0 before 5.4.10; 5.5.0 before 5.5.4; 5.6.0
CVE-2014-0229
6.5
2%
Mar 23
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool,…
Affected: 5.0.0; 5.0.0; 5.0.0
CVE-2013-6446
3.1
1%
Mar 23
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain…
Affected: 4.0.0; 4.0.1; 4.1.0; 4.1.1; 4.1.2; 4.1.3; +11 more
Showing 11