CVE-2017-5642

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@apache.org

Published

2017-04-03

Last modified

2024-08-05

Weaknesses

CWE-276

Affected products

• Ambari (Apache)
• Apache Ambari (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0