Lucene search

RedhatCVE-2015-3270

HistoryNov 02, 2015 - 7:59 p.m.

CVE-2015-3270

2015-11-0219:59:02

CWE-264

redhat

web.nvd.nist.gov

cve-2015-3270

apache ambari

remote authentication

administrative privileges

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.2%

JSON

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.

Affected configurations

Nvd

Node

apacheambariMatch1.7.0

apacheambariMatch2.0.0

apacheambariMatch2.0.1

apacheambariMatch2.1.0

VendorProductVersionCPE
apacheambari1.7.0cpe:2.3:a:apache:ambari:1.7.0:*:*:*:*:*:*:*
apacheambari2.0.0cpe:2.3:a:apache:ambari:2.0.0:*:*:*:*:*:*:*
apacheambari2.0.1cpe:2.3:a:apache:ambari:2.0.1:*:*:*:*:*:*:*
apacheambari2.1.0cpe:2.3:a:apache:ambari:2.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	ambari	1.7.0	cpe:2.3:a:apache:ambari:1.7.0:::::::*
apache	ambari	2.0.0	cpe:2.3:a:apache:ambari:2.0.0:::::::*
apache	ambari	2.0.1	cpe:2.3:a:apache:ambari:2.0.1:::::::*
apache	ambari	2.1.0	cpe:2.3:a:apache:ambari:2.1.0:::::::*

References

www.openwall.com/lists/oss-security/2015/10/13/3

cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.2%

JSON

Related for CVE-2015-3270