NetSight
IP …
medium6.5

CVE-2017-5655

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host.

Impact

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

Affected products

VendorProductAffected versions
ApacheAmbari
Versions 2.2.2, 2.4.0, 2.4.1, 2.4.2, 2.5.0

Weakness classification

CWE-200

References