CVE-2018-17860

概要

参考情報

• docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory
• cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory

cdh のその他の脆弱性

• CVE-2019-7319高 8.3An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, S…
• CVE-2016-6353中 6.5Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level…
• CVE-2016-5724高 7.5Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
• CVE-2016-4572高 8.8In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
• CVE-2016-3131中 6.5Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.