Apache Ambari vulnerabilities

26 known vulnerabilities affecting apache/ambari.

Total CVEs
26
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH9MEDIUM11LOW3

Vulnerabilities

Page 2 of 2
CVE-2015-4928MEDIUMCVSS 4.3≤ 2.0.22015-11-08
CVE-2015-4928 [MEDIUM] CWE-200 CVE-2015-4928: Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext p Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields.
nvd
CVE-2015-4940LOWCVSS 2.1≤ 2.0.22015-11-08
CVE-2015-4940 [LOW] CWE-200 CVE-2015-4940: Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext B Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file.
nvd
CVE-2015-3270MEDIUMCVSS 6.5v1.7.0v2.0.0+2 more2015-11-02
CVE-2015-3270 [MEDIUM] CWE-264 CVE-2015-3270: Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administr Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.
nvd
CVE-2015-1775MEDIUMCVSS 5.5v1.5.0v1.5.1+6 more2015-11-02
CVE-2015-1775 [MEDIUM] CVE-2015-1775: Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Amba Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
nvd
CVE-2015-5210MEDIUMCVSS 5.8≤ 2.1.1v1.7.0+4 more2015-11-02
CVE-2015-5210 [MEDIUM] CVE-2015-5210: Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
nvd
CVE-2015-3186LOWCVSS 3.5≤ 2.0.2v1.7.0+2 more2015-11-02
CVE-2015-3186 [LOW] CWE-79 CVE-2015-3186: Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated c Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change.
nvd
← Previous2 / 2