CVE-2018-8042

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-8042

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8042.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-8042

Published

2018-07-18T15:29:00.437Z

Modified

2026-07-08T16:41:22.068754Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

References

Affected packages

Git / github.com/apache/ambari

Affected ranges

Type

GIT

Repo

https://github.com/apache/ambari

Events

Introduced

1416bba1bf2eb046f51afab4827a1e11749f9807

Last affected

631319b00937a8d04667d93714241d2a0cb17275

Database specific

{
    "cpe": "cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.5.0"
        },
        {
            "last_affected": "2.6.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

release-2.*

release-2.5.0

release-2.5.0-rc2

release-2.5.1

release-2.5.1-rc0

release-2.6.0

release-2.6.0-rc0

release-2.6.1

release-2.6.1-rc0

release-2.6.1-rc1

release-2.6.2

release-2.6.2-rc0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8042.json"