CVE-2015-4078

Опубликовано: 23 мар. 2017

Источник: nvd

CVSS3: 3.1

CVSS2: 3.5

EPSS Низкий

Описание

Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cloudera:cloudera_manager:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.3.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.4.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:cloudera_manager:5.4.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:cloudera:navigator:2.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00236

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-2mqc-5vrf-pmw6