CVE-2016-4949

CVE-2016-4949 describes an information disclosure vulnerability in Cloudera Manager 5.5 and earlier. Remote attackers can exploit this by manipulating the filename parameter to access sensitive information from stderr.log or stdout.log files. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity that can lead to high confidentiality impact without requiring user interaction. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.