Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.
Impact:
A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/02/27/1 | Third Party Advisory Mailing List |
| http://www.openwall.com/lists/oss-security/2024/02/27/1 | Third Party Advisory Mailing List |
| https://lists.apache.org/thread/jglww6h6ngxpo1r6r5fx7ff7z29lnvv8 | Vendor Advisory Mailing List |
| https://lists.apache.org/thread/jglww6h6ngxpo1r6r5fx7ff7z29lnvv8 | Vendor Advisory Mailing List |
Configurations
History
05 May 2025, 21:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:* | |
| References | () http://www.openwall.com/lists/oss-security/2024/02/27/1 - Third Party Advisory, Mailing List | |
| References | () https://lists.apache.org/thread/jglww6h6ngxpo1r6r5fx7ff7z29lnvv8 - Vendor Advisory, Mailing List | |
| First Time |
Apache ambari
Apache |
13 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue. Impact: A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host. | |
| CWE |
27 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-27 09:15
Updated : 2025-05-05 21:01
NVD link : CVE-2023-50379
Mitre link : CVE-2023-50379
JSON object : View
Products Affected
apache
- ambari
CWE
No CWE.