CVE-2016-4950

概要

参考情報

• 2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf · Third Party Advisory
• securityfocus.com/bid/93879

manager のその他の脆弱性

• CVE-2016-4949高 7.5Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the…
• CVE-2016-4948中 6.1Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web scrip…