CVE-2016-6353

—

CVSS 3.1

6.5 medium

EPSS

<1%p53

Published

Nov 26, 2019 (Nov 26, 2019)

Modified

Jun 17, 2026

Description

Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.

Vendors: cloudera
Products: cdh
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.