CVE-2015-3270

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.

Score

CVSS 2.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2015-11-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Ambari (Apache)

References

• http://www.openwall.com/lists/oss-security/2015/10/13/3
• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities