Apache Ambari 1.5.0 - 2.0.2 SSRF Vulnerability

Apache Ambari is prone to server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Ambari < 2.2.1 Arbitrary File Read Vulnerability

Apache Ambari is prone to an arbitrary file read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:ambari";...

Apache Ambari Detection (HTTP)

HTTP based detection of Apache Ambari. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.808648";...

Apache Ambari 1.7 - 2.1.1 Information Disclosure Vulnerability

Apache Ambari is prone to information disclosure and open redirection vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Ambari Unauthorized Access Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A security vulnerability exists in Apache...

Apache Ambari Information Disclosure Vulnerability (CNVD-2016-03363)

Apache Ambari is a set of tools for configuring, managing, and monitoring Apache Hadoop clusters from the Apache USA Software Foundation. An information disclosure vulnerability exists in Apache Ambari versions prior to 2.1.2. It allows local users to obtain sensitive information by reading files...

CVE-2016-0731

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

CVE-2016-0731

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

Design/Logic Flaw

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

Information disclosure

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

CVE-2016-0731

Apache Ambari is affected by CVE-2016-0731 in the File Browser View prior to version 2.2.1. The vulnerability allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration, exposing local file data. Root cause: improper handling of file: URLs ...

CVE-2016-0707

Apache Ambari CVE-2016-0707 affects the Ambari agent prior to 2.1.2. The vulnerability arises from weak permissions on the /var/lib/ambari-agent/data and /var/lib/ambari-agent/keys directories, allowing local users to read files and obtain sensitive information. The issue is documented with a fix...

CVE-2016-0707

The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...

IBM InfoSphere BigInsights使用Apache Ambari信息泄露漏洞

No description provided by source...

IBM InfoSphere BigInsights使用Apache Ambari信息泄露漏洞

No description provided by source...

IBM InfoSphere BigInsights uses Apache Ambari information disclosure vulnerability (CNVD-2015-07487)

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM, USA. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Apache Ambari is a set of tools for configuring, managing, and monitoring...

CVE-2015-4940

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...