Описание
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.
Ссылки
- Broken Link
- Vendor Advisory
- Broken Link
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.5.0 (включая) до 2.6.2 (включая)
cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.00651
Низкий
8.1 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.
EPSS
Процентиль: 70%
0.00651
Низкий
8.1 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-209