CVE-2014-3582

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2017-03-29

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Ambari (Apache)

References

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.0