CM
Product
Cloudera Manager
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 12Low 2
Watch
Add Cloudera Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7399 | 8.8 | Nov 26 | Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the… Affected: 5.0.0 through 5.0.7; 5.1.0 through 5.1.6; 5.2.0 through 5.2.7; 5.3.0 through 5.3.10; 5.4.0 through 5.4.3; 5.4.5 through 5.4.10; +6 more |
| CVE-2018-11744 | 8.1 | Jul 11 | Cloudera Manager through 5.15 has Incorrect Access Control Affected: through 5.16; 6.0.0 through 6.1.0 |
| CVE-2015-6495 | 7.5 | Nov 26 | There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles Affected: before 4.8.6; 5.0.0 before 5.0.7; 5.1.0 before 5.1.6; 5.2.0 before 5.2.7; 5.3.0 before 5.3.7; 5.4.0 before 5.4.6 |
| CVE-2017-9326 | 7.5 | Jul 3 | The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager Affected: 5.11.0 |
Showing 4
