EUVD-2022-4297

Malicious code in bioql PyPI...

CVE-2018-8042

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie...

PT-2018-18401

Name of the Vulnerable Software and Affected Versions: Apache Ambari versions 2.5.0 through 2.6.2 Description: The issue exposes passwords for Hadoop credential stores in Ambari Agent informational log messages when the credential store feature is enabled for eligible services, such as Hive and...

CVE-2018-8042: Generation of Error Message Containing Sensitive Information

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie...

Apache Ambari 2.4.0 - 2.4.1 Command Execution Vulnerability

Apache Ambrari is prone to an unauthenticated custom command execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authorization

Custom commands may be executed on Ambari Agent 2.4.x, before 2.4.2 hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agen...

CVE-2016-6807

Custom commands may be executed on Ambari Agent 2.4.x, before 2.4.2 hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agen...

CVE-2016-6807

Custom commands may be executed on Ambari Agent 2.4.x, before 2.4.2 hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agen...

PT-2017-9022

Name of the Vulnerable Software and Affected Versions Ambari Agent versions 2.4.x through 2.4.1 Ambari Agent versions prior to 2.4.2 Description The issue allows custom commands to be executed on Ambari Agent hosts without proper authorization. This can lead to unauthorized access to certain...

CVE-2016-6807: Improper Access Control

Custom commands may be executed on Ambari Agent 2.4.x, before 2.4.2 hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agen...

CVE-2016-0707: Undefined Security Weakness

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

PT-2016-4380

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1.2 Description The issue allows local users to obtain sensitive information by reading files in the /var/lib/ambari-agent/data and /var/lib/ambari-agent/keys directories due to weak permissions used by the...