← All advisories

Medium severity5.3NVD Advisory· Published Mar 7, 2017· Updated Jun 17, 2026

CVE-2016-4947

CVE-2016-4947

Description

Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gethuenpm	<= 3.9.0	—

Affected products

2

Cloudera/Hue
cpe:2.3:a:cloudera:hue:*:*:*:*:*:*:*:*
Range: <=3.9.0
ghsa-coords
pkg:npm/gethue
Range: <= 3.9.0

Patches

Vulnerability mechanics

References

5

2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdfnvdThird Party AdvisoryWEB
github.com/advisories/GHSA-rxfp-8jmr-xc95ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-4947ghsaADVISORY
web.archive.org/web/20210123183622/http://www.securityfocus.com/bid/93880ghsaWEB
www.securityfocus.com/bid/93880nvd

News mentions

0

No linked articles in our index yet.