Design/Logic Flaw

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

CVE-2016-0731

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...

CVE-2016-0731

Apache Ambari is affected by CVE-2016-0731 in the File Browser View prior to version 2.2.1. The vulnerability allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration, exposing local file data. Root cause: improper handling of file: URLs ...

PT-2016-4391

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.2.1 Description The issue allows remote authenticated administrators to read arbitrary files. This is achieved by using a file: URL in the WebHDFS URL configuration within the File Browser View. Recommendation...

CVE-2016-0731: Improper Access Control

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...