CVE-2016-8752

7.5HIGH

Key Information:

Vendor
Apache
Status
Apache Atlas
Vendor
CVE Published:
29 August 2017

Summary

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Affected Version(s)

Apache Atlas 0.6.0-incubating

Apache Atlas 0.7.0-incubating

Apache Atlas 0.7.1-incubating

References

https://lists.apache.org/thread.html/f7435d66b840daa2a38a...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.