medium6.5
CVE-2021-3167
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.
Impact
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudera | Data Engineering | Version 1.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html
- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
- https://my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and?id=310163
- https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html
- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
- https://my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and?id=310163