Unauthorized Document Access in Cloudera Search Product by Cloudera
CVE-2016-6353

6.5MEDIUM

Key Information:

Vendor

Cloudera

Status
Cdh
Vendor
CVE Published:
26 November 2019

What is CVE-2016-6353?

A vulnerability in Cloudera Search allows unauthorized users to access sensitive documents. Specifically, this issue arises due to the ability of Solr Queries to circumvent Sentry's document-level security features via the RealTimeGetHandler. This could potentially expose confidential information to unauthorized parties, highlighting the importance of upgrading to a secure version to maintain data integrity and security.

References

https://docs.cloudera.com/documentation/other/security-bu...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.