Directory Traversal Vulnerability in Apache Ambari by Apache

CVE-2020-13924

What is CVE-2020-13924?

In Apache Ambari versions 2.6.2.2 and earlier, a vulnerability exists that allows malicious users to craft specific file names to exploit directory traversal. This enables unauthorized access to server files located outside the intended directory structure, potentially leading to sensitive file exposure and information disclosure. Proper patching and adherence to security practices are recommended to mitigate this risk.

References