Описание
Azure HDInsight Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
FAQ
According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?
An authorized attacker with privileges could send controlled inputs to exploit this vulnerability.
What additional customer action is needed to be protected?
The customer action needed is to restart Ambari server in both of the head nodes to have this fix updated.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Azure HDInsight |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
5.7 Medium
CVSS3
Связанные уязвимости
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
Уязвимость службы аналитики данных Azure HDInsights, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить спуфинг-атаки
EPSS
5.7 Medium
CVSS3