Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ambari:2.5.0:rc1:*:*:*:*:*:*

part: a version: 2.5.0 update: rc1

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductAmbari (182855a0-49a4-52a4-af3d-9a6cad98e1c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/ambari purl2cpe 2026-06-01 10:14:29.776567
pkg:github/apache/ambari purl2cpe 2026-06-01 10:14:29.776568
pkg:maven/org.apache.activemq/ambari purl2cpe 2026-06-01 10:14:29.776570
pkg:maven/org.apache.ambari/ambari purl2cpe 2026-06-01 10:14:29.776571
pkg:rpm/fedora/ambari purl2cpe 2026-06-01 10:14:29.776573

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5655 vulnerable 2026-06-08 05:09:47.772390 Details available
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T15:11:47.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.