Login Request a demo
CD
Product
Cdh
by Cloudera · last CVE Nov 26, 2019
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 7Medium 3Low 1
Severity
All severities11Critical0High7Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cdh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6353
6.5
1%
Nov 26
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler
Affected: 5.0.0 before 5.7.0
CVE-2016-3131
6.5
1%
Nov 26
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls
Affected: 5.0.0 before 5.3.10; 5.4.0 before 5.4.10; 5.5.0 before 5.5.4; 5.6.0
CVE-2014-0229
6.5
2%
Mar 23
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool,…
Affected: 5.0.0; 5.0.0; 5.0.0
Showing 3