En bref
- CVE-2016-6807 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant org.apache.ambari:ambari, ambari (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.4%, plus élevée que 84.4% des vulnérabilités.
- Correctif : mettre à jour vers 2.4.2 ou plus récent.
Description
Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.
NVD description
Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.
Autres vulnérabilités de org.apache.ambari:ambari
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free