Apache Ambari 1.2.0 - 2.2.2 Multiple Vulnerabilities

Apache Ambrari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:ambari"; if descripti...

CVE-2016-4976

CVE-2016-4976 affects Apache Ambari 2.x prior to 2.4.0. The issue arises from KDC administrator passwords being exposed on the kadmin command line, which can be revealed to local users via a process listing. Public sources in the connected set confirm the vulnerable component is the Ambari KDC in...