CVE-2016-3131 Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
MediumCVSS 6.5
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudera cdh | >= 5.0.0, < 5.3.10 | 5.3.10 |
| cloudera cdh | >= 5.4.0, < 5.4.10 | 5.4.10 |
| cloudera cdh | >= 5.5.0, < 5.5.4 | 5.5.4 |
| cloudera cdh | = 5.6.0 | No fix listed |
References
- docs.cloudera.com vendor-advisory