CVE-2017-7399 Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those....
HighCVSS 8.8
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudera manager | >= 5.0.0, <= 5.0.7 | No fix listed |
| cloudera manager | >= 5.1.0, <= 5.1.6 | No fix listed |
| cloudera manager | >= 5.2.0, <= 5.2.7 | No fix listed |
| cloudera manager | >= 5.3.0, <= 5.3.10 | No fix listed |
| cloudera manager | >= 5.4.0, <= 5.4.3 | No fix listed |
| cloudera manager | >= 5.4.5, <= 5.4.10 | No fix listed |
| cloudera manager | >= 5.5.0, <= 5.5.6 | No fix listed |
| cloudera manager | >= 5.6.0, <= 5.6.1 | No fix listed |
| cloudera manager | >= 5.7.0, <= 5.7.5 | No fix listed |
| cloudera manager | >= 5.8.0, <= 5.8.3 | No fix listed |
| cloudera manager | >= 5.9.0, <= 5.9.1 | No fix listed |
| cloudera manager | = 5.10.0 | No fix listed |
References
- docs.cloudera.com vendor-advisory