CVE-2016-4949

Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter…

published March 7, 2017

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01616 · 75.7th percentile
Published
2017-03-07T16:00Z
EPSS history
Timeline
  • 07 MAR 16:00Z
    Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter…
    cvelistv5