What is the severity of CVE-2012-2230?

CVE-2012-2230 is rated as a medium severity vulnerability due to its potential for user impersonation in Cloudera Manager.

How do I fix CVE-2012-2230?

You can fix CVE-2012-2230 by upgrading to Cloudera Manager version 3.7.5 or later.

Which versions of Cloudera Manager are affected by CVE-2012-2230?

CVE-2012-2230 affects Cloudera Manager versions 3.7.0 to 3.7.4 and Cloudera Service and Configuration Manager version 3.5.

Can remote users exploit CVE-2012-2230 without authentication?

No, exploitation of CVE-2012-2230 requires remote authenticated user access.

What protections are in place if Kerberos is enabled regarding CVE-2012-2230?

If Kerberos is enabled, the threat of CVE-2012-2230 is mitigated, as the vulnerability specifically arises when Kerberos is disabled.

Vulnerability/
CVE-2012-2230

medium

6.5

CWE

310

12/4/2012

6/8/2024

CVE-2012-2230

First published: Thu Apr 12 2012(Updated: )

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Cloudera Manager	=3.7.0
Cloudera Manager	=3.7.0
Cloudera Manager	=3.7.1
Cloudera Manager	=3.7.1
Cloudera Manager	=3.7.2
Cloudera Manager	=3.7.2
Cloudera Manager	=3.7.3
Cloudera Manager	=3.7.3
Cloudera Manager	=3.7.4
Cloudera Manager	=3.7.4
Cloudera Manager	=3.5

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-2230?
CVE-2012-2230 is rated as a medium severity vulnerability due to its potential for user impersonation in Cloudera Manager.
How do I fix CVE-2012-2230?
You can fix CVE-2012-2230 by upgrading to Cloudera Manager version 3.7.5 or later.
Which versions of Cloudera Manager are affected by CVE-2012-2230?
CVE-2012-2230 affects Cloudera Manager versions 3.7.0 to 3.7.4 and Cloudera Service and Configuration Manager version 3.5.
Can remote users exploit CVE-2012-2230 without authentication?
No, exploitation of CVE-2012-2230 requires remote authenticated user access.
What protections are in place if Kerberos is enabled regarding CVE-2012-2230?
If Kerberos is enabled, the threat of CVE-2012-2230 is mitigated, as the vulnerability specifically arises when Kerberos is disabled.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/last-modified-date
agent/references
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cloudera
canonical/cloudera manager
version/cloudera manager/3.7.0
version/cloudera manager/3.7.1
version/cloudera manager/3.7.2
version/cloudera manager/3.7.3
version/cloudera manager/3.7.4
version/cloudera manager/3.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.