Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ambari:2.5.0:rc0:*:*:*:*:*:*

part: a version: 2.5.0 update: rc0

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductAmbari (182855a0-49a4-52a4-af3d-9a6cad98e1c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/ambari purl2cpe 2026-06-01 10:14:29.776560
pkg:github/apache/ambari purl2cpe 2026-06-01 10:14:29.776562
pkg:maven/org.apache.activemq/ambari purl2cpe 2026-06-01 10:14:29.776563
pkg:maven/org.apache.ambari/ambari purl2cpe 2026-06-01 10:14:29.776564
pkg:rpm/fedora/ambari purl2cpe 2026-06-01 10:14:29.776566

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5655 vulnerable 2026-06-08 05:09:47.771806 Details available
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T15:11:47.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.