Description
Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | gethue | <= 3.9.0 | — | GHSA-rxfp-8jmr-xc95 |
Medium · 5.3
CVE-2016-4947
EUVD-2022-5250GHSA-rxfp-8jmr-xc95
Cloudera HUE Account Enumeration
Published Mar 7, 2017 · Updated Aug 6, 2024 · Assigned by mitre