CVE-2017-5655

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-5655
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5655.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-5655
Published
2017-05-15T14:29:00.213Z
Modified
2026-04-10T04:01:43.153176Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

References

Affected packages

Git / github.com/apache/ambari

Affected ranges

Type
GIT
Repo
https://github.com/apache/ambari
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
08c6c18907d8f35cce55eeaf9123db19fe34ce10
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
27938ec0e5994037e2f0123f0bafedc008ea0bb0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b112376b631384852a6c8aaa2e102d8dd39a9f1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3689a8db02a2dbb7814490a0aba20e7de3771c0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3689a8db02a2dbb7814490a0aba20e7de3771c0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8f1b8c5f7275d39508ffb2a0fd60b7592447f863
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc724513758a31cb283247711714ded67a445c57
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8f1b8c5f7275d39508ffb2a0fd60b7592447f863
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b9056bac4324ba929a72985a80b99e7e85931a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
049a051f5e255c478c60d54a36102cb316f37703
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b9056bac4324ba929a72985a80b99e7e85931a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1416bba1bf2eb046f51afab4827a1e11749f9807
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
280b050ef9f73b6023120cbe43803947aa59a558
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
70b4ba403dd7e890d7fcc5964b1cd231ee6e98c0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1416bba1bf2eb046f51afab4827a1e11749f9807
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.2-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.2-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0-rc0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.0-rc2"
        }
    ]
}

Affected versions

2.*
2.1.3_to_2.2.0_rename
Ambari-2.*
Ambari-2.1.0-tag
release-2.*
release-2.1.0
release-2.1.0-rc0
release-2.1.0-rc1
release-2.2.0-rc0
release-2.2.2
release-2.2.2-rc0
release-2.2.2-rc1
release-2.4.0
release-2.4.0-rc0
release-2.4.1
release-2.4.1-rc0
release-2.4.1-rc1
release-2.4.2
release-2.4.2-rc0
release-2.4.2-rc1
release-2.5.0
release-2.5.0-rc0
release-2.5.0-rc1
release-2.5.0-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5655.json"