VYPR
Get started
← All advisories
Medium severity6.5NVD Advisory· Published May 15, 2017· Updated May 13, 2026

CVE-2017-5655

CVE-2017-5655

Description

In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.

Affected products

16
  • Apache/Ambari15 versions
    cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:apache:ambari:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.2.2:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.2.2:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.1:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:apache:ambari:2.5.0:rc2:*:*:*:*:*:*
  • Apache Software Foundation/Apache Ambariv5
    Range: 2.2.2 through 2.4.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.