CVE-2017-5655

Published: May 15, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

Affected (15)

Products: Apache: Ambari

Apache

1 product

Ambari

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Apache Ambari	Version 2.2.2
Apache Ambari	Version 2.2.2 rc0
Apache Ambari	Version 2.2.2 rc1
Apache Ambari	Version 2.4.0
Apache Ambari	Version 2.4.0 rc0
Apache Ambari	Version 2.4.1
Apache Ambari	Version 2.4.1 rc0
Apache Ambari	Version 2.4.1 rc1
Apache Ambari	Version 2.4.2
Apache Ambari	Version 2.4.2 rc0
Apache Ambari	Version 2.4.2 rc1
Apache Ambari	Version 2.5.0
Apache Ambari	Version 2.5.0 rc0
Apache Ambari	Version 2.5.0 rc1
Apache Ambari	Version 2.5.0 rc2