CVE-2017-5654 In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache ambari | = 2.4.0 | No fix listed |
| apache ambari | = 2.4.1 | No fix listed |
| apache ambari | = 2.5.0 | No fix listed |
| Apache Ambari | = 2.4.0 through 2.4.2 | No fix listed |
| Apache Ambari | = 2.5.0 | No fix listed |
References
- cwiki.apache.org vendor-advisory