NetSight
IP …
high7.5

CVE-2016-4950

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

Impact

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

Affected products

VendorProductAffected versions
ClouderaManager
through 5.5.0

Weakness classification

CWE-200

References