CVE-2016-0731

N/A

Description

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration.

CVE Details

CVSS v3.1 ScoreN/A

Published5/18/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

apache:ambari

Weaknesses (CWE)

CWE-284

References

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1(secalert@redhat.com)

https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html(secalert@redhat.com)

https://issues.apache.org/jira/browse/AMBARI-14780(secalert@redhat.com)

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1(af854a3a-2127-422b-91ae-364da2661108)

https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html(af854a3a-2127-422b-91ae-364da2661108)

https://issues.apache.org/jira/browse/AMBARI-14780(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.