Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2016-4976

Disclosure Date: March 29, 2017 (last updated November 26, 2024)
Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.
0
0
Attacker Value
Unknown

CVE-2015-1775

Disclosure Date: November 02, 2015 (last updated October 05, 2023)
Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
0
0
Attacker Value
Unknown

CVE-2015-5210

Disclosure Date: November 02, 2015 (last updated October 05, 2023)
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
0
0