{"id":"CVE-2016-4947","aliases":["GHSA-rxfp-8jmr-xc95"],"url":"https://o3.security/vulnerability/CVE-2016-4947","summary":"Cloudera HUE Account Enumeration","details":"Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.","published":"2017-03-07T16:59:00.243Z","modified":"2026-07-08T12:05:30.085653Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"gethue","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/93880"},{"type":"ADVISORY","url":"http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T12:05:30.085653Z"}}