PT-2017-16638 · Apache · Ambari

Publicado 2017-04-03 · Atualizado 2019-10-03 · CVE-2017-5642

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ambari versions 2.4.0 through 2.4.2

Description The issue occurs during the installation of Ambari, where Ambari Server artifacts are not created with proper Access Control Lists (ACLs). ACLs are used to define permissions and access rights to resources.

Recommendations For Ambari versions 2.4.0 through 2.4.2, consider reconfiguring the installation process to ensure proper ACLs are applied to Ambari Server artifacts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2017-5642

Produtos afetados

Ambari

Referências · 3

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5642 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5642 · Aviso do Fabricante