cloudera cloudera manager 5.3.3 vulnerabilities and exploits

(subscribe to this query)

Cloudera Navigator 2.2.x prior to 2.2.4 and 2.3.x prior to 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle malicious users to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).

Cloudera Navigator 2.2.2 Cloudera Cloudera Manager 5.4.0 Cloudera Cloudera Manager 5.3.0 Cloudera Cloudera Manager 5.3.2 Cloudera Cloudera Manager 5.3.3 Cloudera Navigator 2.2.3 Cloudera Navigator 2.3.0 Cloudera Navigator 2.3.1 Cloudera Navigator 2.2.0 Cloudera Navigator 2.2.1 Cloudera Cloudera Manager 5.4.1 Cloudera Cloudera Manager 5.3.1

Cloudera Manager 4.x, 5.0.x prior to 5.0.6, 5.1.x prior to 5.1.5, 5.2.x prior to 5.2.5, and 5.3.x prior to 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by readi...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook