CVE-2015-4940

CWE-200 — Information Exposure3 documents3 sources
Severity
2.1LOW
EPSS
0.1%
top 69.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Ambari
Timeline
PublishedNov 8
Latest updateMay 17

Description

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/ambari2.0.2

🔴Vulnerability Details

2
GHSA
GHSA-4w9m-3xr4-v33c: Apache Ambari before 2↗2022-05-17
▶
CVEList
CVE-2015-4940: Apache Ambari before 2↗2015-11-08
▶
CVE-2015-4940 (LOW CVSS 2.1) | Apache Ambari before 2.1 | cvebase.io