CVE-2017-5654

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.

Score

CVSS 3.0 7.5 High

Status

Modified - security@apache.org

Published

2017-05-12

Last modified

2024-08-05

Weaknesses

CWE-91

Affected products

• Ambari (Apache)
• Apache Ambari (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3
• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1