Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ambari vulnerabilities and exploits
(subscribe to this query)
5.5
CVSSv3
CVE-2016-4976
Apache Ambari 2.x prior to 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.
Apache Ambari 2.0.2
Apache Ambari 2.1.0
Apache Ambari 2.1.2
Apache Ambari 2.2.1
Apache Ambari 2.2.2
Apache Ambari 2.0.0
Apache Ambari 2.0.1
Apache Ambari 2.1.1
Apache Ambari 2.2.0
NA
CVE-2015-1775
Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari prior to 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
Apache Ambari 1.7.0
Apache Ambari 1.6.0
Apache Ambari 1.5.0
Apache Ambari 2.0.2
Apache Ambari 2.0.1
Apache Ambari 2.0.0
Apache Ambari 1.6.1
Apache Ambari 1.5.1
NA
CVE-2015-5210
Open redirect vulnerability in Apache Ambari prior to 2.1.2 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
Apache Ambari 2.0.1
Apache Ambari 2.1.0
Apache Ambari
Apache Ambari 1.7.0
Apache Ambari 2.0.0
Apache Ambari 2.0.2
6.5
CVSSv3
CVE-2017-5655
In Ambari 2.2.2 up to and including 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Apache Ambari 2.2.2
Apache Ambari 2.4.0
Apache Ambari 2.4.1
Apache Ambari 2.4.2
Apache Ambari 2.5.0
NA
CVE-2015-3186
Cross-site scripting (XSS) vulnerability in Apache Ambari prior to 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change.
Apache Ambari
Apache Ambari 1.7.0
Apache Ambari 2.0.0
Apache Ambari 2.0.1
NA
CVE-2015-3270
Apache Ambari prior to 2.0.2 or 2.1.x prior to 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.
Apache Ambari 1.7.0
Apache Ambari 2.0.1
Apache Ambari 2.1.0
Apache Ambari 2.0.0
9.8
CVSSv3
CVE-2017-5642
During installation of Ambari 2.4.0 up to and including 2.4.2, Ambari Server artifacts are not created with proper ACLs.
Apache Ambari 2.4.0
Apache Ambari 2.4.2
Apache Ambari 2.4.1
7.5
CVSSv3
CVE-2017-5654
In Ambari 2.4.x (prior to 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Apache Ambari 2.5.0
Apache Ambari 2.4.0
Apache Ambari 2.4.1
9.8
CVSSv3
CVE-2016-6807
Custom commands may be executed on Ambari Agent (2.4.x, prior to 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user exec...
Apache Ambari 2.4.1
Apache Ambari 2.4.0
3.3
CVSSv3
CVE-2016-0707
The agent in Apache Ambari prior to 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.
Apache Ambari
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4040
cross-site scripting
CVE-2023-25790
CVE-2024-2961
XML external entity
CVE-2024-26926
CVE-2024-32806
CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »