CVE-2017-5654

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-5654
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5654.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-5654
Published
2017-05-12T21:29:00Z
Modified
2024-09-03T01:53:06.359754Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.

References

Affected packages

Git / github.com/apache/ambari

Affected ranges

Type
GIT
Repo
https://github.com/apache/ambari
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Last affected
Last affected

Affected versions

release-2.*

release-2.4.0
release-2.4.0-rc0
release-2.5.0
release-2.5.0-rc0
release-2.5.0-rc1
release-2.5.0-rc2