CVE-2016-4950: Infoleak
Published Mar 7, 2017
·Updated
Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.
Affected Software
1 affected component
Cloudera Manager<=5.5.0
Event History
Mar 7, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4950?
CVE-2016-4950 is classified as a medium severity vulnerability affecting Cloudera Manager.
2
How do I fix CVE-2016-4950?
To fix CVE-2016-4950, upgrade Cloudera Manager to version 5.5.1 or later.
3
Who is affected by CVE-2016-4950?
CVE-2016-4950 affects all users of Cloudera Manager versions 5.5.0 and earlier.
4
What does CVE-2016-4950 allow attackers to do?
CVE-2016-4950 allows remote attackers to enumerate user sessions through a specific API request.
5
Is CVE-2016-4950 a local or remote vulnerability?
CVE-2016-4950 is a remote vulnerability that can be exploited from outside the affected system.