Описание
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
FAQ
How could an attacker exploit this vulnerability?
An authenticated attacker with access to the target HDI cluster could send a specially crafted network request to create and assign themselves as a Cluster Administrator. Cluster Administrators can read/write/delete and perform all resource service management operations.
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain cluster administrator privileges.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
7.2 High
CVSS3
Связанные уязвимости
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability
Уязвимость службы аналитики данных Azure HDInsights, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии
EPSS
7.2 High
CVSS3