Medium severity5.3NVD Advisory· Published May 3, 2018· Updated Jun 17, 2026
CVE-2018-8003
CVE-2018-8003
Description
Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is running as. Direct network access to the Ambari Server is required to issue this request, and those Ambari Servers that are protected behind a firewall, or in a restricted network zone are at less risk of being affected by this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Apache Software Foundation/Apache Ambariv5Range: Apache Ambari 1.4.0 to 2.6.1
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/104161nvdThird Party AdvisoryVDB Entry
- cwiki.apache.org/confluence/display/AMBARI/Ambari+VulnerabilitiesnvdVendor Advisory
News mentions
0No linked articles in our index yet.