CVE-2021-29243

Mô tả

Tham khảo

• docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory
• my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site · Vendor Advisory

Lỗ hổng khác của cloudera manager

• CVE-2021-32483TRUNG BÌNH 5.3Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.
• CVE-2021-30132NGHIÊM TRỌNG 9.8Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
• CVE-2021-32482TRUNG BÌNH 6.1Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
• CVE-2019-14449TRUNG BÌNH 5.4An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can resu…
• CVE-2017-7399CAO 8.8Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the u…