CVE-2015-5210

Published: Nov 2, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

Affected (6)

Products: Apache: Ambari

Apache

1 product

Ambari

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apache Ambari	Up to 2.1.1
Apache Ambari	Version 1.7.0
Apache Ambari	Version 2.0.0
Apache Ambari	Version 2.0.1
Apache Ambari	Version 2.0.2
Apache Ambari	Version 2.1.0

References (4)

http://www.openwall.com/lists/oss-security/2015/10/13/4

Source: secalert@redhat.com

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/10/13/4

Source: af854a3a-2127-422b-91ae-364da2661108

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.