Sensitive Data Exposure in Ambari from Apache Software Foundation

CVE-2017-5655

What is CVE-2017-5655?

Versions of Ambari from 2.2.2 to 2.5.0 are susceptible to sensitive data exposure. The Ambari Server can inadvertently store sensitive information within temporary files residing on the disk. These files can be accessed by any user authenticated on the server host, leading to potential data compromise. It is crucial for users to upgrade to the fixed versions, 2.4.3 or 2.5.1, to mitigate this risk. For further details, refer to the Apache Ambari vulnerabilities documentation.

References