Security Advisory

CVE-2016-6807

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-28 20:00:00
Last updated 2024-08-06 01:43:37
Assigner apache
CVSS score not scored
State PUBLISHED

Description

Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.