Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-30132: Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
CVE-2021-30132 · published 4 years ago
Summary
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cloudera | cloudera_manager |
7.2.4 cpe:2.3:a:cloudera:cloudera_manager:7.2.4:*:*:*:*:*:*:* |
Original advisory text
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
References
- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security... Not Applicable Vendor Advisory
- https://my.cloudera.com/knowledge/TSB-2021-491-Authorization-Bypass-in-Cloudera-... Permissions Required Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published8 Nov 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-30132 · NVD
Track software like this
Free during beta