Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache ambari 2.5.0 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2017-5655
In Ambari 2.2.2 up to and including 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Apache Ambari 2.2.2
Apache Ambari 2.4.0
Apache Ambari 2.4.1
Apache Ambari 2.4.2
Apache Ambari 2.5.0
7.5
CVSSv3
CVE-2017-5654
In Ambari 2.4.x (prior to 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Apache Ambari 2.5.0
Apache Ambari 2.4.0
Apache Ambari 2.4.1
8.1
CVSSv3
CVE-2018-8042
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.
Apache Ambari
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started