CVE-2023-50379: Improper Control of Generation of Code

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host...

Low: Red Hat Security Advisory: OpenShift Virtualization 2.4.2 Images

Red Hat OpenShift Virtualization release 2.4.2 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2015-3186: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

PT-2015-6089

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1.0 Description A cross-site scripting XSS issue allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change. Recommendations For...