Sensitive Information Exposure in Cloudera Manager by Cloudera
CVE-2015-6495

7.5HIGH

Key Information:

Vendor

Cloudera

Status
Cloudera Manager
Vendor
CVE Published:
26 November 2019

What is CVE-2015-6495?

Cloudera Manager versions prior to 5.4.6 are susceptible to a vulnerability that allows for the exposure of sensitive information through diagnostic support bundles. This could potentially grant unauthorized users access to confidential data that should be protected, thus compromising the integrity and security of the system.

References

https://docs.cloudera.com/documentation/other/security-bu...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.