CVE-2021-3167: cloudera data engineering – CVSS 6.5 · Watchpost

← All vulnerabilities

CVE-2021-3167

中危 6.5CVE-2021-3167 · Published 15/03/2021 · updated 17/06/2026

要点

CVE-2021-3167 是影响 data engineering (cloudera) 的中危 (CVSS 6.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.1%，高于 66.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
data engineering cloudera	`= 1.3.0`	No fix yet

Description

In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.

References

docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html · Vendor Advisory
docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory
my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and · Vendor Advisory

data engineering 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free