Publish GHSA-rxfp-8jmr-xc95

This commit is contained in:
advisory-database[bot]
2023-07-31 21:11:45 +00:00
parent 69740170b3
commit ac2cc219d5
@@ -1,12 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxfp-8jmr-xc95",
"modified": "2022-05-17T02:56:17Z",
"modified": "2023-07-31T21:10:08Z",
"published": "2022-05-17T02:56:17Z",
"aliases": [
"CVE-2016-4947"
],
"details": "Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.",
"summary": "Cloudera HUE Account Enumeration",
"details": "Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to `desktop/api/users/autocomplete`.",
"severity": [
{
"type": "CVSS_V3",
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "gethue"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.9.0"
}
]
}
]
}
],
"references": [
{
@@ -23,11 +42,11 @@
},
{
"type": "WEB",
"url": "http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf"
"url": "https://web.archive.org/web/20210123183622/http://www.securityfocus.com/bid/93880"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/93880"
"url": "http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf"
}
],
"database_specific": {
@@ -35,8 +54,8 @@
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2023-07-31T21:10:08Z",
"nvd_published_at": "2017-03-07T16:59:00Z"
}
}