Apache Ambari Open Redirect Vulnerability

Apache Ambari is the tool to provision, manage, and monitor Apache Hadoop clusters. An open redirection security vulnerability exists in Apache Ambari versions prior to 2.1.2. A remote attacker can exploit this vulnerability to redirect a user to an arbitrary website and perform a phishing attack...

CVE-2015-5210

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...

CVE-2015-3270

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords...

CVE-2015-3186

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

Cross site scripting

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

Open redirect

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...

Design/Logic Flaw

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords...

CVE-2015-1775

Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...

CVE-2015-3186

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

CVE-2015-5210

CVE-2015-5210 is an open redirect vulnerability in Apache Ambari prior to 2.1.2. The issue allows remote attackers to redirect users to arbitrary websites and conduct phishing via a URL in the targetURI parameter. Affected product is Apache Ambari; the root cause is an open redirect in the handli...

CVE-2015-3270

Apache Ambari is affected by a privilege-escalation vulnerability affecting versions before 2.0.2 and 2.1.x before 2.1.1. Remote authenticated users can obtain administrative privileges via unspecified vectors (possibly related to password changes). Root cause: privilege escalation in the Ambari ...

CVE-2015-5210

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...

CVE-2015-1775

Apache Ambari (1.5.0–2.0.2) is vulnerable to SSRF via the proxy endpoint api/v1/proxy. The issue allows remote authenticated users to perform port scans and access unsecured services through a crafted REST call, due to improper validation in the proxy handling. Impact details in multiple sources ...

CVE-2015-3270

Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords...

CVE-2015-1775

Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...

CVE-2015-3186

Apache Ambari 1.5.0 through 2.0.2 is affected by an XSS in the note field of a configuration change. The vulnerability arises when authenticated remote cluster operators can inject arbitrary script/HTML, with impact described as partial integrity loss and no confidentiality or availability impact...

Apache Ambari Remote Privilege Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A remote boost vulnerability exists in Apac...

Apache Ambari Cross-Site Scripting Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A cross-site scripting vulnerability exists...

Apache Ambari Security Bypass Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A security bypass vulnerability exists in...

Apache Ambari /var/lib/ambari-server/ambari-env.sh Insecure Privilege Setting Vulnerability

Apache Ambari is a Web-based tool that supports provisioning, management and monitoring of Apache Hadoop clusters. A security vulnerability in Apache Ambari /var/lib/ambari-server/ambari-env.sh allows local attackers to exploit the vulnerability to elevate privileges...