CVEvulnerability
CVE-2012-2230
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-04-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.
Affected configurations
• cloudera cloudera manager 3.7.0
• cloudera cloudera manager 3.7.1
• cloudera cloudera manager 3.7.2
• cloudera cloudera manager 3.7.3
• cloudera cloudera manager 3.7.4
• cloudera cloudera service and configuration manager 3.5
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/48776 secunia.com
- https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin ccp.cloudera.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74823 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/48776 secunia.com
- https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin ccp.cloudera.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74823 exchange.xforce.ibmcloud.com