Cloudera HUE Account Enumeration

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-4947 · ADVISORY
• cloudera/hue · PACKAGE
• web.archive.org/web/20210123183622/http://www.securityfocus.com/bid/93880 · WEB
• 2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf · WEB
• securityfocus.com/bid/93880

hue 的其他漏洞

• CVE-2025-3884高危 7.5Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sen…
• CVE-2021-32481中危 6.1Cloudera Hue 4.6.0 allows XSS via the type parameter.
• CVE-2021-29994中危 6.1Cloudera Hue 4.6.0 allows XSS.
• CVE-2015-8094中危 6.1Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect users to arbitrary web sites and conduct phish…
• CVE-2016-4946中危 6.1Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script …