Unrated severityNVD Advisory· Published Jun 10, 2014· Updated Jun 17, 2026
CVE-2014-0220
CVE-2014-0220
Description
Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.
Affected products
22cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*range: <=4.8.2
- cpe:2.3:a:cloudera:cloudera_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:4.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cloudera_manager:5.0.0:*:*:*:*:*:*:*
- (no CPE)range: <4.8.3 || >=5.0.0 <5.0.1
Patches
Vulnerability mechanics
References
4- www.cloudera.com/content/cloudera-content/cloudera-docs/SecurityBulletins/Security-Bulletin/csb_topic_2.htmlnvdVendor Advisory
- packetstormsecurity.com/files/126956/Cloudera-Manager-4.8.2-5.0.0-Information-Disclosure.htmlnvd
- www.securityfocus.com/archive/1/532312/100/0/threadednvd
- www.securityfocus.com/bid/67912nvd
News mentions
0No linked articles in our index yet.