CVE-2018-17860

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2019-11-26

Last modified

2024-08-05

Weaknesses

CWE-276

Affected products

• Cdh (Cloudera)

References

• https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_vp4_q2x_thb
• https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hadoop