3 matches found
CVE-2015-1775
Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...
PT-2015-5439
Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1.0 Description A server-side request forgery SSRF issue exists in the proxy endpoint "api/v1/proxy" that allows remote authenticated users to conduct port scans and access unsecured services via a crafted RES...
CVE-2015-1775: Undefined Security Weakness
Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...