← All advisories

High severity7.2NVD Advisory· Published Nov 26, 2019· Updated Jun 17, 2026

CVE-2018-17860

CVE-2018-17860

Description

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

Affected products

7

Cloudera/Cdh6 versions
cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*range: >=5.0.0,<=5.14.0
- cpe:2.3:a:cloudera:cdh:5.15.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:5.15.1:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cloudera:cdh:6.0.1:*:*:*:*:*:*:*
- (no CPE)range: 5.x through 5.15.1 and 6.x through 6.0.1
Cloudera/CDHdescription

Patches

Vulnerability mechanics

References

2

docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.htmlnvdVendor Advisory
www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.