CVE-2024-51941

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-51941
A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execute arbitrary code. The vulnerability occurs when processing alert definitions, where malicious input can be injected into the alert script execution path. An attacker with authenticated access can exploit this vulnerability to execute arbitrary commands on the server. The issue has been fixed in the latest versions of Ambari.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2025/01/21/9 Mailing List Vendor Advisory
https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8j Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*
History

09 Jun 2025, 19:35

Type Values Removed Values Added
CWE CWE-77
CPE cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*
First Time Apache ambari
Apache
References () http://www.openwall.com/lists/oss-security/2025/01/21/9 - () http://www.openwall.com/lists/oss-security/2025/01/21/9 - Mailing List, Vendor Advisory
References () https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8j - () https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8j - Vendor Advisory

21 Jan 2025, 23:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/01/21/9 -
CWE CWE-75

21 Jan 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-21 22:15

Updated : 2025-06-09 19:35

NVD link : CVE-2024-51941

Mitre link : CVE-2024-51941

JSON object : View

Products Affected

apache

  • ambari
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')