CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

Design/Logic Flaw

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

Information disclosure

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-0731

Apache Ambari is affected by CVE-2016-0731 in the File Browser View prior to version 2.2.1. The vulnerability allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration, exposing local file data. Root cause: improper handling of file: URLs ...

CVE-2016-0707

Apache Ambari CVE-2016-0707 affects the Ambari agent prior to 2.1.2. The vulnerability arises from weak permissions on the /var/lib/ambari-agent/data and /var/lib/ambari-agent/keys directories, allowing local users to read files and obtain sensitive information. The issue is documented with a fix...

CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-0731

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

IBM InfoSphere BigInsights使用Apache Ambari信息泄露漏洞

No description provided by source...

IBM InfoSphere BigInsights使用Apache Ambari信息泄露漏洞

No description provided by source...

IBM InfoSphere BigInsights uses Apache Ambari information disclosure vulnerability (CNVD-2015-07487)

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM, USA. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Apache Ambari is a set of tools for configuring, managing, and monitoring...

IBM InfoSphere BigInsights Uses Apache Ambari Information Disclosure Vulnerability

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM, USA. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Apache Ambari is a set of tools for configuring, managing, and monitoring...

CVE-2015-4940

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

Design/Logic Flaw

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file...

Design/Logic Flaw

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

CVE-2015-4940

CVE-2015-4940 affects Apache Ambari before 2.1 as used in IBM Infosphere BigInsights 4.x before 4.1, where a configuration file stores the BigSheets password in clear text. This allows a local attacker who can read the Ambari configs to obtain sensitive information. IBM’s bulletin notes that the ...

CVE-2015-4940

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2015-4928

The CVE-2015-4928 issue affects Apache Ambari 2.1 as used in IBM InfoSphere BigInsights 4.x before 4.1, where the Configs screen displays passwords in cleartext. This allows a local attacker with access to the Ambari UI to read sensitive passwords by viewing the configuration screens. IBM’s secur...