CVE-2018-17860: Cloudera Cdh

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

Affected products

• Cloudera Cdh: from 5.0.0, up to and including 5.14.0; version 5.15.0 only; version 5.15.1 only; version 6.0.0 only; version 6.0.1 only

Published 2019-11-26. Last modified 2026-06-17.