CVE-2012-2230
First published: Thu Apr 12 2012(Updated: )
Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cloudera Cloudera Manager | =3.7.0 | |
| Cloudera Cloudera Manager | =3.7.0 | |
| Cloudera Cloudera Manager | =3.7.1 | |
| Cloudera Cloudera Manager | =3.7.1 | |
| Cloudera Cloudera Manager | =3.7.2 | |
| Cloudera Cloudera Manager | =3.7.2 | |
| Cloudera Cloudera Manager | =3.7.3 | |
| Cloudera Cloudera Manager | =3.7.3 | |
| Cloudera Cloudera Manager | =3.7.4 | |
| Cloudera Cloudera Manager | =3.7.4 | |
| Cloudera Cloudera Service And Configuration Manager | =3.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cloudera
- canonical/cloudera cloudera manager
- version/cloudera cloudera manager/3.7.0
- version/cloudera cloudera manager/3.7.1
- version/cloudera cloudera manager/3.7.2
- version/cloudera cloudera manager/3.7.3
- version/cloudera cloudera manager/3.7.4
- canonical/cloudera cloudera service and configuration manager
- version/cloudera cloudera service and configuration manager/3.5