Skip to content

CVE-2016-6353 Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

MediumCVSS 6.5 EPSS 0.75%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

Affected products

ProductAffected versionsFixed in
cloudera cdh >= 5.0.0, < 5.7.0 5.7.0

References