Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache ambari vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2017-5642
During installation of Ambari 2.4.0 up to and including 2.4.2, Ambari Server artifacts are not created with proper ACLs.
Apache Ambari 2.4.0
Apache Ambari 2.4.2
Apache Ambari 2.4.1
7.5
CVSSv2
CVE-2014-3582
In Ambari 1.2.0 up to and including 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.
Apache Ambari
7.5
CVSSv2
CVE-2016-6807
Custom commands may be executed on Ambari Agent (2.4.x, prior to 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user exec...
Apache Ambari 2.4.1
Apache Ambari 2.4.0
6.5
CVSSv2
CVE-2015-3270
Apache Ambari prior to 2.0.2 or 2.1.x prior to 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.
Apache Ambari 1.7.0
Apache Ambari 2.0.1
Apache Ambari 2.1.0
Apache Ambari 2.0.0
5.8
CVSSv2
CVE-2015-5210
Open redirect vulnerability in Apache Ambari prior to 2.1.2 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
Apache Ambari 2.0.1
Apache Ambari 2.1.0
Apache Ambari
Apache Ambari 1.7.0
Apache Ambari 2.0.0
Apache Ambari 2.0.2
5.5
CVSSv2
CVE-2015-1775
Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari prior to 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
Apache Ambari 1.7.0
Apache Ambari 1.6.0
Apache Ambari 1.5.0
Apache Ambari 2.0.2
Apache Ambari 2.0.1
Apache Ambari 2.0.0
Apache Ambari 1.6.1
Apache Ambari 1.5.1
5
CVSSv2
CVE-2020-13924
In Apache Ambari versions 2.6.2.2 and previous versions, malicious users can construct file names for directory traversal and traverse to other directories to download files.
Apache Ambari
5
CVSSv2
CVE-2018-8003
Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the ...
Apache Ambari
5
CVSSv2
CVE-2017-5654
In Ambari 2.4.x (prior to 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Apache Ambari 2.5.0
Apache Ambari 2.4.0
Apache Ambari 2.4.1
4.3
CVSSv2
CVE-2020-1936
A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.
Apache Ambari
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »