CVE-2017-7399

—

CVSS 3.1

8.8 high

EPSS

<1%p56

Published

Nov 26, 2019 (Nov 26, 2019)

Modified

Jun 17, 2026

Description

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.

Vendors: cloudera
Products: cloudera manager
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.