CVE-2015-1775

Published: Nov 2, 2015Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

Affected (8)

Products: Apache: Ambari

Apache

1 product

Ambari

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Apache Ambari	Version 1.5.0
Apache Ambari	Version 1.5.1
Apache Ambari	Version 1.6.0
Apache Ambari	Version 1.6.1
Apache Ambari	Version 1.7.0
Apache Ambari	Version 2.0.0
Apache Ambari	Version 2.0.1
Apache Ambari	Version 2.0.2

References (4)

http://www.openwall.com/lists/oss-security/2015/10/13/2

Source: secalert@redhat.com

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/10/13/2

Source: af854a3a-2127-422b-91ae-364da2661108

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.