CVE-2017-5655 In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the hos...
MediumCVSS 6.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache ambari | = 2.2.2 | No fix listed |
| apache ambari | = 2.2.2-rc0 | No fix listed |
| apache ambari | = 2.2.2-rc1 | No fix listed |
| apache ambari | = 2.4.0 | No fix listed |
| apache ambari | = 2.4.0-rc0 | No fix listed |
| apache ambari | = 2.4.1 | No fix listed |
| apache ambari | = 2.4.1-rc0 | No fix listed |
| apache ambari | = 2.4.1-rc1 | No fix listed |
| apache ambari | = 2.4.2 | No fix listed |
| apache ambari | = 2.4.2-rc0 | No fix listed |
| apache ambari | = 2.4.2-rc1 | No fix listed |
| apache ambari | = 2.5.0 | No fix listed |
| apache ambari | = 2.5.0-rc0 | No fix listed |
| apache ambari | = 2.5.0-rc1 | No fix listed |
| apache ambari | = 2.5.0-rc2 | No fix listed |
| Apache Ambari | = 2.2.2 through 2.4.2 | No fix listed |
| Apache Ambari | = 2.5.0 | No fix listed |
References
- cwiki.apache.org release-notes vendor-advisory