Test ID:	1.3.6.1.4.1.25623.1.0.106639
Category:	Web application abuses
Title:	Cloudera Manager Multiple Vulnerabilities
Summary:	Cloudera Manager is prone to multiple vulnerabilities.
Description:	Summary: Cloudera Manager is prone to multiple vulnerabilities. Vulnerability Insight: Cloudera Manager is prone to multiple vulnerabilities: - Multiple cross-site scripting (XSS) vulnerabilities (CVE-2016-4948) - Obtain sensitive information via a stderr.log or stdout.log (CVE-2016-4949) - Enumeration of user sessions via a request to /api/v11/users/sessions (CVE-2016-4950) Affected Software/OS: Cloudera 5.5.0 and previous. Solution: Update to 5.5.1 or newer versions. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4948 BugTraq ID: 93878 http://www.securityfocus.com/bid/93878 http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf Common Vulnerability Exposure (CVE) ID: CVE-2016-4949 BugTraq ID: 93882 http://www.securityfocus.com/bid/93882 Common Vulnerability Exposure (CVE) ID: CVE-2016-4950 BugTraq ID: 93879 http://www.securityfocus.com/bid/93879
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.