CVE-2017-3154 Apache Atlas produces Stack trace in error response
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi apache-atlas(PyPI) | All versions | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.1 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.11 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.12 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.13 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.14 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.2 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.3 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.4 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.5 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.15 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.16 | No fix listed |
| org.apache.atlas/atlas-common(Maven) | >= 0.6.0-incubating, < 0.7.1-incubating | 0.7.1-incubating |
| org.apache.atlas/atlas-common(Maven) | = 0.6-incubating | No fix listed |
| org.apache.atlas/atlas-common(Maven) | = 0.7-incubating | No fix listed |
| apache atlas | = 0.6.0 | No fix listed |
| apache atlas | = 0.6.0-rc1 | No fix listed |
| apache atlas | = 0.6.0-rc2 | No fix listed |
| apache atlas | = 0.7.0 | No fix listed |
| apache atlas | = 0.7.0-rc1 | No fix listed |
| apache atlas | = 0.7.0-rc2 | No fix listed |
| Apache Atlas | = 0.6.0-incubating | No fix listed |
| Apache Atlas | = 0.7.0-incubating | No fix listed |
References
- 100581 vdb-entry
- [dev] 20170507 CVE updates: fixes in Apache Atlas 0.7.1-incubating mailing-list
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com
- lists.apache.org
- github.com