Design/Logic Flaw

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

CVE-2016-0731: Improper Access Control

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

PT-2016-4391

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.2.1 Description The issue allows remote authenticated administrators to read arbitrary files. This is achieved by using a file: URL in the WebHDFS URL configuration within the File Browser View. Recommendation...