CVE-2017-9326: High severity Cloudera Cloudera Manager vulnerability
Published Jul 3, 2019
·Updated
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.
Affected Software
1 affected component
Cloudera Cloudera Manager=5.11.0
Event History
Jul 3, 2019
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-9326.
2
What is the severity of CVE-2017-9326?
The severity of CVE-2017-9326 is high with a severity value of 7.5.
3
Which software is affected by CVE-2017-9326?
Cloudera Manager version 5.11.0 is affected by CVE-2017-9326.
4
How can the keystore password be exposed?
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager.
5
Is the keystore file exposed?
No, the keystore file itself is not exposed.