ClouderaNOW Activate your data, unleash your AI, and scale across any cloud | Dec 9

 Register
    • Cloudera Cloudera
    • Contact us(888) 789-1488
    International:+1 (650) 362-0488
    Email Sales
    Support Portal
    Business Continunity diagram

    The Cloudera security response team provides a single point of contact for customers and the community to report and provide information on security vulnerabilities in Cloudera products. The team works internally with Cloudera's engineering and support organizations as well as the external Apache community to identify, fix, and communicate security vulnerabilities in all Cloudera products.

    How to report a vulnerability

    Cloudera strongly encourages customers and the community to report security vulnerabilities to our Security Response Team before disclosing them in a public forum.

    • If you are not a current Cloudera customer, please email security@cloudera.com to report a vulnerability.

    • If you are a Cloudera customer, please create a support case through the Support Portal. Be sure to include details on the version of software you are using and the hardware that it's running on. For any vulnerabilities found on www.cloudera.com or affiliated websites please include the full URL of the site/page where the vulnerability can be reproduced.

    Please refrain from sending us reports about the following vulnerabilities:

    • General low-severity issues reported by automated scanners

      • Missing Security Headers (eg. HSTS, CSP, SPF, DMARC)

      • Missing Flags on Cookies

      • SSL issues (weak ciphers/key size)

      • Cross-Site Request Forgery (CSRF) on unauthenticated forms or forms with no security impact

      • Clickjacking

      • Other general low-severity issues reported by automated scanners

    • Rate Limiting (unless it constitutes a significant risk)

    • Attacks requiring MITM or physical access to a user's device

    • Previously known vulnerable libraries without a working Proof of Concept

    • Vulnerabilities only affecting users of outdated or unpatched browsers [Less than 2 stable versions behind the latest released stable version]

    • Software version disclosure / Banner identification issues

    To submit your report securely to Cloudera, please use the GPG key below.

     

    KEY FINGERPRINT

     

    GPG PUBLIC KEY BLOCK

    Copy and paste the key below:

    Bug Bounty Policy

    Cloudera does not currently offer a Bug Bounty for any product or website vulnerabilities.

     

    Explore Cloudera’s Trust Center

    World-class training, support, & services

    Ready to Get Started?

    Your form submission has failed.

    This may have been caused by one of the following:

    • Your request timed out
    • A plugin/browser extension blocked the submission. If you have an ad blocking plugin please disable it and close this message to reload the page.