VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 12, 2012· Updated Jun 16, 2026

CVE-2012-2230

CVE-2012-2230

Description

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Cloudera/Manager11 versions
    cpe:2.3:a:cloudera:cloudera_manager:3.7.0:*:enterprise:*:*:*:*:*+ 10 more
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.0:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.0:*:free:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.1:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.1:*:free:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.2:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.2:*:free:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.3:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.3:*:free:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.4:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:3.7.4:*:free:*:*:*:*:*
    • (no CPE)range: <3.7.5
  • Cloudera/Cloudera Service And Configuration Manager2 versions
    cpe:2.3:a:cloudera:cloudera_service_and_configuration_manager:3.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cloudera:cloudera_service_and_configuration_manager:3.5:*:*:*:*:*:*:*
    • (no CPE)range: =3.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.