CVE-2014-0220: Infoleak
Published Jun 10, 2014
·Updated
Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.
Affected Software
21 affected components
Cloudera Cloudera Manager<=4.8.2
Cloudera Cloudera Manager=4.0.1
Cloudera Cloudera Manager=4.0.2
Cloudera Cloudera Manager=4.0.3
Cloudera Cloudera Manager=4.1
Cloudera Cloudera Manager=4.1.1
Cloudera Cloudera Manager=4.1.2
Cloudera Cloudera Manager=4.1.3
Cloudera Cloudera Manager=4.1.4
Cloudera Cloudera Manager=4.5.0
Cloudera Cloudera Manager=4.5.1
Cloudera Cloudera Manager=4.5.2
Cloudera Cloudera Manager=4.5.3
Cloudera Cloudera Manager=4.5.4
Cloudera Cloudera Manager=4.6.0
Cloudera Cloudera Manager=4.6.1
Cloudera Cloudera Manager=4.6.2
Cloudera Cloudera Manager=4.6.3
Cloudera Cloudera Manager=4.7.2
Cloudera Cloudera Manager=4.8.1
Cloudera Cloudera Manager=5.0.0
Event History
Jun 10, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0220?
CVE-2014-0220 is classified as a high severity vulnerability.
2
How do I fix CVE-2014-0220?
To fix CVE-2014-0220, upgrade Cloudera Manager to version 4.8.3 or higher, or 5.0.1 or higher.
3
Who is affected by CVE-2014-0220?
CVE-2014-0220 affects Cloudera Manager versions prior to 4.8.3 and the 5.x series before 5.0.1.
4
What type of vulnerability is CVE-2014-0220?
CVE-2014-0220 is an information disclosure vulnerability.
5
What are the consequences of CVE-2014-0220?
The consequences of CVE-2014-0220 allow remote authenticated users to access sensitive configuration information via the API.