EUVD-2017-14737

Malware in sbrugna...

EUVD-2014-3558

Malware in sbrugna...

CVE-2018-8003

Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is...

CVE-2017-5642: Incorrect Default Permissions

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs...

CVE-2014-3582: Improper Control of Generation of Code

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster...