Information Disclosure Vulnerability in Cloudera Manager

CVE-2016-4949

What is CVE-2016-4949?

Cloudera Manager versions 5.5 and earlier are susceptible to an information disclosure vulnerability that allows remote attackers to access sensitive information. This can be exploited by manipulating the filename parameter to retrieve the contents of stderr.log or stdout.log files associated with specific processes. By doing so, attackers may gain unauthorized insights into system operations and configurations, posing a significant risk to the integrity and confidentiality of the affected systems.

References