Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ambari:2.4.0:rc0:*:*:*:*:*:*

part: a version: 2.4.0 update: rc0

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductAmbari (182855a0-49a4-52a4-af3d-9a6cad98e1c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/ambari purl2cpe 2026-06-01 10:14:29.776499
pkg:github/apache/ambari purl2cpe 2026-06-01 10:14:29.776501
pkg:maven/org.apache.activemq/ambari purl2cpe 2026-06-01 10:14:29.776502
pkg:maven/org.apache.ambari/ambari purl2cpe 2026-06-01 10:14:29.776503
pkg:rpm/fedora/ambari purl2cpe 2026-06-01 10:14:29.776505

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5655 vulnerable 2026-06-08 05:09:47.768302 Details available
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T15:11:47.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.