CVE-2017-7399

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-11-26

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Cloudera Manager (Cloudera)

References

• https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_tvf_34r_1cb