Cloudera Manager up to 5.3.2 YARN NodeManager process File access control

Summaryinfo

A vulnerability was found in Cloudera Manager up to 4.x/5.0.5/5.1.4/5.2.4/5.3.2 and classified as problematic. This issue affects some unknown processing of the file /var/run/cloudera-scm-agent/process of the component YARN NodeManager. Executing a manipulation can lead to access control (File). This vulnerability is registered as CVE-2015-2263. The attack needs to be launched locally. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Cloudera Manager up to 4.x/5.0.5/5.1.4/5.2.4/5.3.2 (Cloud Software) and classified as problematic. This vulnerability affects an unknown code of the file /var/run/cloudera-scm-agent/process of the component YARN NodeManager. The manipulation with an unknown input leads to a access control vulnerability (File). The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect confidentiality. CVE summarizes:

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, allows local users to obtain sensitive information by reading the files, as demonstrated by yarn.keytab or ssl-server.xml in /var/run/cloudera-scm-agent/process.

The bug was discovered 03/08/2015. The weakness was published 03/23/2017 (Website). The advisory is available at cloudera.com. This vulnerability was named CVE-2015-2263 since 03/09/2015. Local access is required to approach this attack. A single authentication is needed for exploitation. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The vulnerability was handled as a non-public zero-day exploit for at least 746 days. During that time the estimated underground price was around $0-$5k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 11918 (Cloudera Manager YARN NodeManager Configuration Disclosure Vulnerability.).

Upgrading to version 5.0.6, 5.1.5, 5.2.5 or 5.3.3 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Cloud Software

Vendor

• Cloudera

Name

• Manager

Version

• 4.x
• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.1.0
• 5.1.1
• 5.1.2
• 5.1.3
• 5.1.4
• 5.2.0
• 5.2.1
• 5.2.2
• 5.2.3
• 5.2.4
• 5.3.0
• 5.3.1
• 5.3.2

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion