CVE-2017-5654

—

CVSS 3.0

7.5 high

EPSS

2%p81

Published

May 12, 2017 (May 12, 2017)

Modified

Jun 17, 2026

Description

In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.

Vendors: apache
Products: ambari
Weakness: CWE-91
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.