Vulnerabilities > CVE-2017-9326 - Credentials Management vulnerability in Cloudera Manager 5.11.0
Attack vector
NETWORK Attack complexity
HIGH Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |