← All advisories

High severity7.5NVD Advisory· Published Mar 7, 2017· Updated Jun 17, 2026

CVE-2016-4950

CVE-2016-4950

Description

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

Affected products

2

Cloudera/Manager2 versions
cpe:2.3:a:cloudera:manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cloudera:manager:*:*:*:*:*:*:*:*range: <=5.5.0
- (no CPE)range: <=5.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.