CVE-2016-0707 The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive inform...
LowCVSS 3.3
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache ambari | <= 2.1.1 | No fix listed |
References
- cwiki.apache.org vendor-advisory