Versions Compared

Old Version 14

changes.mady.by.user Sumit Mohanty

Saved on

compared with

New Version 15

changes.mady.by.user Yusaku Sako

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Fixed in Ambari 2.2.1

...

CVE-2016-0731: Ambari File Browser View security vulnerability

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected: 1.7.0 to 2.1.1

Versions Fixed: 2.2.1

Description: Ambari File Browser View allows an Ambari admin user to gain access to Ambari Server's local file system.

Mitigation: Ambari users should upgrade to versions 2.2.1 or above.

Fixed in Ambari 2.1.2

...

CVE-2016-0707: File System Permissions aren't restrictive enough for the Agent/Command logs

...