CVE-2017-7399: Cloudera Manager

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.

Affected products

• Cloudera Cloudera Manager: from 5.0.0, up to and including 5.0.7; from 5.1.0, up to and including 5.1.6; from 5.2.0, up to and including 5.2.7; from 5.3.0, up to and including 5.3.10; from 5.4.0, up to and including 5.4.3; from 5.4.5, up to and including 5.4.10; …

Published 2019-11-26. Last modified 2026-06-17.