Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Ambari
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-0707 1 Apache 1 Ambari 2016-05-18 2.1 LOW 3.3 LOW
The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.