PT-2017-16649
CVE-2017-5655
·
تاريخ النشر
2017-05-15
·
تاريخ التحديث
2017-05-23
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ambari versions 2.2.2 through 2.4.2
Ambari version 2.5.0
Description
The issue allows sensitive data to be stored on disk in temporary files on the Ambari Server host. These temporary files are readable by any user authenticated on the host.
Recommendations
For Ambari versions 2.2.2 through 2.4.2, restrict access to the temporary files on the Ambari Server host to prevent unauthorized users from reading sensitive data.
For Ambari version 2.5.0, restrict access to the temporary files on the Ambari Server host to prevent unauthorized users from reading sensitive data.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾