CVE-2012-2230 | BDVDB-2026-49824 Detail

Description#

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/74823
http://secunia.com/advisories/48776
https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin

Exploit#

No public exploit known

History#

Version 12012-04-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.