Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ambari:2.4.2:rc1:*:*:*:*:*:*

part: a version: 2.4.2 update: rc1

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductAmbari (182855a0-49a4-52a4-af3d-9a6cad98e1c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/ambari purl2cpe 2026-06-01 10:14:29.776540
pkg:github/apache/ambari purl2cpe 2026-06-01 10:14:29.776541
pkg:maven/org.apache.activemq/ambari purl2cpe 2026-06-01 10:14:29.776542
pkg:maven/org.apache.ambari/ambari purl2cpe 2026-06-01 10:14:29.776544
pkg:rpm/fedora/ambari purl2cpe 2026-06-01 10:14:29.776545

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5655 vulnerable 2026-06-08 05:09:47.771013 Details available
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T15:11:47.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.