Apache Ambari vulnerabilities
26 known vulnerabilities affecting apache/ambari.
Total CVEs
26
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH9MEDIUM11LOW3
Vulnerabilities
Page 2 of 2
CVE-2015-5210P4MEDIUMCVSS 5.8≤ 2.1.1v1.7.0+4 more2015-11-02
CVE-2015-5210 [MEDIUM] CVE-2015-5210: Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
nvd
CVE-2016-4976P4MEDIUMCVSS 5.5v2.0.0v2.0.1+7 more2017-03-29
CVE-2016-4976 [MEDIUM] CWE-200 CVE-2016-4976: Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, whic
Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.
nvd
CVE-2015-4928P4MEDIUMCVSS 4.3≤ 2.0.22015-11-08
CVE-2015-4928 [MEDIUM] CWE-200 CVE-2015-4928: Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext p
Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields.
nvd
CVE-2015-3186P4LOWCVSS 3.5≤ 2.0.2v1.7.0+2 more2015-11-02
CVE-2015-3186 [LOW] CWE-79 CVE-2015-3186: Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated c
Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change.
nvd
CVE-2016-0707P4LOWCVSS 3.3≤ 2.1.12016-05-18
CVE-2016-0707 [LOW] CWE-264 CVE-2016-0707: The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data
The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.
nvd
CVE-2015-4940P4LOWCVSS 2.1≤ 2.0.22015-11-08
CVE-2015-4940 [LOW] CWE-200 CVE-2015-4940: Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext B
Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file.
nvd
← Previous2 / 2