CVE-2016-4976

—

CVSS 3.0

5.5 medium

EPSS

<1%p42

Published

Mar 29, 2017 (Mar 29, 2017)

Modified

Jun 17, 2026

Description

Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.

Vendors: apache
Products: ambari
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.