NetSight
IP …
high7.5

CVE-2017-5654

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host w…

Impact

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.

Affected products

VendorProductAffected versions
ApacheAmbari
Versions 2.4.0, 2.4.1, 2.5.0

Weakness classification

CWE-91

References