NetSight
high8.8

CVE-2017-7399

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other u…

Impact

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.

Affected products

VendorProductAffected versions
ClouderaCloudera Manager
from 5.0.0 through 5.0.7
from 5.1.0 through 5.1.6
from 5.2.0 through 5.2.7
from 5.3.0 through 5.3.10
from 5.4.0 through 5.4.3
from 5.4.5 through 5.4.10

Weakness classification

References