CVE:CVE-2012-2230
CNNVD:CNNVD-201204-260
Cloudera Manager 3.7.5之前的3.7.x版本与Service和Configuration Manager 3.5版本中存在漏洞，该漏洞源于在Kerberos被禁用时未正确安装taskcontroller.cfg。远程认证用户可利用该漏洞借助未明向量模拟任意用户账户。
solution:Upgrade cloudera cloudera_manager to a higher version than 3.7.0,3.7.1,3.7.2,3.7.3,3.7.4,and avoid the version 3.7.0,3.7.1,3.7.2,3.7.3,3.7.4; Upgrade cloudera cloudera_service_and_configuration_manager to a higher version than 3.5,and avoid the version 3.5