CVSS 3.0
3.3 lowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2015-2263
Low (3.3) in cloudera cloudera manager. EPSS 0.3% chance of exploitation in the next 30 days.
Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as demonstrated by yarn.keytab or ssl-server.xml in /var/run/cloudera-scm-agent/process.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cloudera:cloudera_manager