Skip to content
OpenAdvisories
Unscored CVE-2017-5654 EUVD-2017-14736GHSA-r6hc-8gvg-gr72

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to…

Published May 12, 2017 · Updated Aug 5, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Ambari

Description

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Ambari 2.4.0 through 2.4.2, 2.5.0 —

References