What’s Vulnerable › Vulnerabilities

CVE-2017-7399

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-26 · updated 2026-06-17
• Weakness: CWE-269

Description

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.

Affected products

• Cloudera Manager: from 5.0.0 through 5.0.7; from 5.1.0 through 5.1.6; from 5.2.0 through 5.2.7; from 5.3.0 through 5.3.10; from 5.4.0 through 5.4.3; from 5.4.5 through 5.4.10

References

• https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_tvf_34r_1cb
• https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_tvf_34r_1cb

Get alerted when CVE-2017-7399 or the next vulnerability affects your stack