CVE-2023-50379

2024-02-2709:15:36

CWE-94

[email protected]

web.nvd.nist.gov

2367

cve-2023-50379

malicious code injection

apache ambari

security vulnerability

upgrade

cluster operator

root access

nvd

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.8%

JSON

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.

Impact:
A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.

Affected configurations

Vulners

Node

apacheambariRange≤2.7.7

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Ambari",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.7.7",
        "status": "affected",
        "version": "2.7.0",
        "versionType": "semver"
      }
    ]
  }
]