CVE-2017-9326

The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-07-03

Last modified

2024-08-05

Weaknesses

CWE-255

Affected products

• Cloudera Manager (Cloudera)

References

• https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html