CVE-2017-5654

CVE-2017-5654: vulnerability in Apache Ambari

Published · Updated

Follow this CVE+ Monitor Apache Ambari

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.2%
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.
Affected products
Apache Software Foundation · Apache Ambari
Related CVEs — Apache Ambari

In the same product, most dangerous first.

CVE-2018-8003—CVE-2018-8003EPSS 4.2%CVE-2020-13924—CVE-2020-13924EPSS 4.0%CVE-2020-1936—Stored XSS in Apache AmbariEPSS 2.9%CVE-2016-6807—CVE-2016-6807EPSS 2.4%CVE-2017-5655—CVE-2017-5655EPSS 2.1%CVE-2017-5642—CVE-2017-5642EPSS 1.9%