CVE-2016-6807

N/A

Descricao

Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/28/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

apache:ambari

Fraquezas (CWE)

CWE-284

Referencias

http://www.securityfocus.com/bid/97184(security@apache.org)

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.2(security@apache.org)

http://www.securityfocus.com/bid/97184(af854a3a-2127-422b-91ae-364da2661108)

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.2(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.