CVE-2016-6353

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-11-26

Last modified

2024-08-06

Weaknesses

CWE-863

Affected products

• Cdh (Cloudera)

References

• https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_165