PT-2017-5878
CVE-2014-3582
·
تاريخ النشر
2017-03-29
·
تاريخ التحديث
2017-05-31
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Ambari versions 1.2.0 through 2.2.2
Description:
The issue allows for the potential execution of arbitrary system commands on the Ambari Server host during the generation of SSL certificates for hosts in an Ambari cluster.
Recommendations:
For Ambari versions 1.2.0 through 2.2.2, update to a version that contains a fix for this issue to prevent the execution of arbitrary system commands.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾