Unauthorized File Access Vulnerability in Ambari by Apache

CVE-2017-5654

What is CVE-2017-5654?

An authorized user of Ambari's Hive View may exploit a vulnerability that permits unauthorized read access to sensitive files on the server host. This security flaw is present in Ambari versions 2.4.x prior to 2.4.3 and in version 2.5.0, which raises significant concerns regarding data integrity and confidentiality. Affected users are recommended to upgrade to the fixed versions of Ambari to mitigate potential risks.

References