CVE-2017-5655

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-5655
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5655.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-5655
Published
2017-05-15T14:29:00Z
Modified
2026-10-24T10:30:53Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

References

Affected packages

Git / github.com/apache/ambari

Affected ranges

Type
GIT
Repo
https://github.com/apache/ambari
Events
Introduced
08c6c18907d8f35cce55eeaf9123db19fe34ce10
Last Affected
70b4ba403dd7e890d7fcc5964b1cd231ee6e98c0
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.2"
                },
                {
                    "last_affected":  "2.2.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.2.2:rc0:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.2-rc0"
                },
                {
                    "last_affected":  "2.2.2-rc0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.2.2:rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.2-rc1"
                },
                {
                    "last_affected":  "2.2.2-rc1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0"
                },
                {
                    "last_affected":  "2.4.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0-rc0"
                },
                {
                    "last_affected":  "2.4.0-rc0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.1"
                },
                {
                    "last_affected":  "2.4.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.1:rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.1-rc1"
                },
                {
                    "last_affected":  "2.4.1-rc1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.1:rc0:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.1-rc0"
                },
                {
                    "last_affected":  "2.4.1-rc0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.2"
                },
                {
                    "last_affected":  "2.4.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.2-rc1"
                },
                {
                    "last_affected":  "2.4.2-rc1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.4.2:rc0:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.2-rc0"
                },
                {
                    "last_affected":  "2.4.2-rc0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5.0"
                },
                {
                    "last_affected":  "2.5.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.5.0:rc2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5.0-rc2"
                },
                {
                    "last_affected":  "2.5.0-rc2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5.0-rc0"
                },
                {
                    "last_affected":  "2.5.0-rc0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5.0-rc1"
                },
                {
                    "last_affected":  "2.5.0-rc1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*
2.2.2
2.2.2-rc0
2.2.2-rc1
2.4.0
2.4.1
2.4.1-rc0
2.4.2
2.4.2-rc0
2.5.0
2.5.0-rc0
2.5.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5655.json"