EUVD-2017-14737

Malware in sbrugna...

EUVD-2014-3558

Malware in sbrugna...

CVE-2018-8003

Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is...

PT-2017-16638

Name of the Vulnerable Software and Affected Versions Ambari versions 2.4.0 through 2.4.2 Description The issue occurs during the installation of Ambari, where Ambari Server artifacts are not created with proper Access Control Lists ACLs. ACLs are used to define permissions and access rights to...

CVE-2017-5642: Incorrect Default Permissions

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs...

CVE-2014-3582: Improper Control of Generation of Code

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster...

PT-2017-5878

Name of the Vulnerable Software and Affected Versions: Ambari versions 1.2.0 through 2.2.2 Description: The issue allows for the potential execution of arbitrary system commands on the Ambari Server host during the generation of SSL certificates for hosts in an Ambari cluster. Recommendations: Fo...