CVE Catalog
CVE-2016-4950
HighSummary
Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.
Risk Assessment
Attackers can gain information about active user sessions, potentially leading to further attacks on the system.
Recommendation
It is recommended to update Cloudera Manager to the latest version to mitigate this vulnerability.
Other vulnerabilities in Cloudera Manager
Original NVD description (English source)
Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.