CVE-2014-0220

Опубликовано: 10 июн. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*

Версия до 4.8.2 (включая)

cpe:2.3:a:cloudera:cloudera_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.5.4:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.6.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.7.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:4.8.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.0032

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-9v29-jj89-qr6f

github

больше 3 лет назад