In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-05-12 21:29
Updated : 2024-02-28 15:44
NVD link : CVE-2017-5654
Mitre link : CVE-2017-5654
CVE.ORG link : CVE-2017-5654
JSON object : View
Products Affected
apache
- ambari
CWE
CWE-91
XML Injection (aka Blind XPath Injection)