Incorrect Access Control in Cloudera Manager by Cloudera
CVE-2018-11744

8.1HIGH

Key Information:

Vendor

Cloudera

Status
Cloudera Manager
Vendor
CVE Published:
11 July 2019

What is CVE-2018-11744?

Cloudera Manager versions up to 5.15 are vulnerable due to insufficient access control mechanisms. This oversight could allow unauthorized users to gain access to sensitive operations and data, posing potential risks for system integrity and information confidentiality. Addressing this vulnerability is crucial for maintaining robust security practices within organizations using Cloudera Manager.

References

https://www.cloudera.com/documentation/other/security-bul...
x_refsource_MISC
https://www.cloudera.com/documentation/other/security-bul...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.