Low severity3.1NVD Advisory· Published Mar 23, 2017· Updated May 13, 2026
CVE-2013-6446
CVE-2013-6446
Description
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs.
Affected products
17cpe:2.3:a:cloudera:cdh:4.0.0:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:cloudera:cdh:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:5.0.0:beta:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/97068nvdThird Party AdvisoryVDB Entry
- www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.