CVE-2017-5655

medium Apache
CVSS v3 Base Score
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 65% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Confidentiality
High
Integrity
None
Availability
None
Published: May 15, 2017 (3286 days ago)
Last Modified: May 13, 2026
Vendor: Apache
Source: NVD

Description

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

CWE

CWE-200

Affected Products

apache ambari

References

🔗 cwiki.apache.org 🔗 cwiki.apache.org 🔗 cwiki.apache.org 🔗 cwiki.apache.org