CVE-2017-5655

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.2.2:rc0:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.2.2:rc1:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.1:rc0:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.1:rc1:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.2:rc0:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:apache:ambari:2.5.0:rc2:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-15 14:29

Updated : 2024-02-04 19:11


NVD link : CVE-2017-5655

Mitre link : CVE-2017-5655

CVE.ORG link : CVE-2017-5655


JSON object : View

Products Affected

apache

  • ambari
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor