VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 15, 2017· Updated Jun 17, 2026

CVE-2017-5655

CVE-2017-5655

Description

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Apache/Ambari16 versions
    cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.2.2:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.2.2:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc2:*:*:*:*:*:*
    • (no CPE)range: 2.2.2 - 2.5.0
  • Apache Software Foundation/Apache Ambariv5
    Range: 2.2.2 through 2.4.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.