CVE-2015-3186 Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration c...
LowCVSS 3.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache ambari | <= 2.0.2 | No fix listed |
| apache ambari | = 1.7.0 | No fix listed |
| apache ambari | = 2.0.0 | No fix listed |
| apache ambari | = 2.0.1 | No fix listed |
References
- [oss-security] 20151013 [CVE-2015-3186] Apache Ambari XSS vulnerability mailing-list
- cwiki.apache.org vendor-advisory