CVE-2025-23196

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-23196
A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary shell commands. The vulnerability arises when defining alert scripts, where the script filename field is executed using `sh -c`. An attacker with authenticated access can exploit this vulnerability to inject malicious commands, leading to remote code execution on the server. The issue has been fixed in the latest versions of Ambari.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2025/01/21/8 Mailing List Vendor Advisory
https://lists.apache.org/thread/70g1l5lxvko7kvhyxmtmklhhfrlon837 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*
History

09 Jun 2025, 19:42

Type Values Removed Values Added
First Time Apache ambari
Apache
CPE cpe:2.3:a:apache:ambari:*:*:*:*:*:*:*:*
References () http://www.openwall.com/lists/oss-security/2025/01/21/8 - () http://www.openwall.com/lists/oss-security/2025/01/21/8 - Mailing List, Vendor Advisory
References () https://lists.apache.org/thread/70g1l5lxvko7kvhyxmtmklhhfrlon837 - () https://lists.apache.org/thread/70g1l5lxvko7kvhyxmtmklhhfrlon837 - Vendor Advisory

21 Jan 2025, 23:15

Type Values Removed Values Added
CWE CWE-77
References
  • () http://www.openwall.com/lists/oss-security/2025/01/21/8 -

21 Jan 2025, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-21 22:15

Updated : 2025-06-09 19:42

NVD link : CVE-2025-23196

Mitre link : CVE-2025-23196

JSON object : View

Products Affected

apache

  • ambari
CWE

No CWE.