Unscored CVE-2015-3270 EUVD-2015-3322GHSA-xprv-fqx6-cfrr

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vector…

Published Nov 2, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Description

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.

References

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities
[oss-security] 20151013 [CVE-2015-3270] A non-administrative user can escalate themselves to have administrative privileges remotely mailing-list