CVE-2020-13924

In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-03-17 09:15

Updated : 2024-02-28 18:08


NVD link : CVE-2020-13924

Mitre link : CVE-2020-13924

CVE.ORG link : CVE-2020-13924


JSON object : View

Products Affected

apache

  • ambari
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')