« Volver al listado

CVE-2017-9327

Estado: ModificadaMedia (6.5)—

Secret data of processes managed by CM is not secured by file permissions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cloudera — Cloudera Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-9327",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-07-03T17:15:09.737",
  "references": [
    {
      "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-275"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Secret data of processes managed by CM is not secured by file permissions."
    },
    {
      "lang": "es",
      "value": "Los datos secretos de los procesos administrados por CM no están protegidos por permisos de archivo."
    }
  ],
  "lastModified": "2026-06-17T01:27:53.610",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cloudera:cloudera_manager:5.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED574096-F087-46A0-BC5C-A38E607B6CB1"
            },
            {
              "criteria": "cpe:2.3:a:cloudera:cloudera_manager:5.10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "814E11D0-DF7D-452D-A57B-554EB743C1E1"
            },
            {
              "criteria": "cpe:2.3:a:cloudera:cloudera_manager:5.11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C8407AD-B285-44FD-A4A9-AA75D2F981BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}