Advisories · Technology
Apache Software Foundation Apache Ambari.
Every CVE that names Apache Software Foundation Apache Ambari among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts
- Apache Software Foundation Apache Ambari
- Code injection
- CVSS 8.8 High
Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition
- Apache Software Foundation Apache Ambari
- Command injection
- CVSS 7.5 High
Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie
- Apache Software Foundation Apache Ambari
- XML external entities (XXE)
-
Apache Software Foundation Apache Ambari: In Apache Ambari versions 2.6.2.2 and earlier…
- Apache Software Foundation Apache Ambari
-
Apache Software Foundation Apache Ambari: Apache Ambari, version 2.5.0 to 2.6.2…
- Apache Software Foundation Apache Ambari
-
Apache Software Foundation Apache Ambari: Apache Ambari, versions 1.4.0 to 2.6.1…
- Apache Software Foundation Apache Ambari
-
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host.
- Apache Software Foundation Apache Ambari
-
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
- Apache Software Foundation Apache Ambari
-
During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.
- Apache Software Foundation Apache Ambari