CVE-2017-5642

2017-04-0316:00:00

apache

www.cve.org

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

CNA Affected

[
  {
    "product": "Apache Ambari",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.0 through 2.4.2"
      }
    ]
  }
]

References

cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0