CVE-2017-5655

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@apache.org

Published

2017-05-15

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Ambari (Apache)
• Apache Ambari (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3
• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1