CVE-2015-4928 Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive inform...
MediumCVSS 4.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache ambari | <= 2.0.2 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 1034102 vdb-entry