CVE-2017-5655

Name of the Vulnerable Software and Affected Versions Ambari versions 2.2.2 through 2.4.2 Ambari version 2.5.0

Description The issue allows sensitive data to be stored on disk in temporary files on the Ambari Server host. These temporary files are readable by any user authenticated on the host.

Recommendations For Ambari versions 2.2.2 through 2.4.2, restrict access to the temporary files on the Ambari Server host to prevent unauthorized users from reading sensitive data. For Ambari version 2.5.0, restrict access to the temporary files on the Ambari Server host to prevent unauthorized users from reading sensitive data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.