GHSA-q3pw-6vf2-66hf

Suggest an improvement
Source
https://github.com/advisories/GHSA-q3pw-6vf2-66hf
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-q3pw-6vf2-66hf/GHSA-q3pw-6vf2-66hf.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-q3pw-6vf2-66hf
Aliases
Published
2022-05-17T02:52:22Z
Modified
2023-11-07T18:00:52.153318Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Apache Ambari reveals administrator passwords
Details

Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.

Database specific
{
    "nvd_published_at": "2017-03-29T20:59:00Z",
    "cwe_ids": [
        "CWE-200"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-31T21:12:28Z"
}
References

Affected packages

Maven / org.apache.ambari:ambari

Package

Name
org.apache.ambari:ambari
View open source insights on deps.dev
Purl
pkg:maven/org.apache.ambari/ambari

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0.0
Fixed
2.4.0

Affected versions

2.*

2.0.0.0