Lucene search

K
nvd[email protected]NVD:CVE-2014-8733
HistoryFeb 10, 2015 - 7:59 p.m.

CVE-2014-8733

2015-02-1019:59:00
CWE-200
web.nvd.nist.gov
2

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password.

Affected configurations

Nvd
Node
clouderacloudera_managerMatch5.2.0
OR
clouderacloudera_managerMatch5.2.1
OR
clouderacloudera_managerMatch5.3.0
VendorProductVersionCPE
clouderacloudera_manager5.2.0cpe:2.3:a:cloudera:cloudera_manager:5.2.0:*:*:*:*:*:*:*
clouderacloudera_manager5.2.1cpe:2.3:a:cloudera:cloudera_manager:5.2.1:*:*:*:*:*:*:*
clouderacloudera_manager5.3.0cpe:2.3:a:cloudera:cloudera_manager:5.3.0:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2014-8733