CVE-2012-2230

no score yetEPSS 1.9%

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2012-04-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cloudera:cloudera_manager
cloudera:cloudera_service_and_configuration_manager

References

http://secunia.com/advisories/48776
https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin
https://exchange.xforce.ibmcloud.com/vulnerabilities/74823
http://secunia.com/advisories/48776
https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin

Check your stack JSON