Apache Ambari reveals administrator passwords

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-4976 · ADVISORY
• cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities · WEB
• apache/ambari · PACKAGE
• web.archive.org/web/20210124014838/http://www.securityfocus.com/bid/97229 · WEB
• securityfocus.com/bid/97229 · Third Party Advisory

Lỗ hổng khác của org.apache.ambari:ambari

• CVE-2023-50378TRUNG BÌNH 6.1Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be stored XSS, Could be e…
• CVE-2022-45855CAO 8.8SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary …
• CVE-2022-42009CAO 8.8SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary co…
• CVE-2020-1936TRUNG BÌNH 6.1A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.
• CVE-2016-6807NGHIÊM TRỌNG 9.8Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operati…