AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ambariGHSA-9g2j-5685-h44h

Apache Ambari SSRF Vulnerability

ambari

CVE-2015-1775 · Published May 17, 2022 · updated Dec 6, 2024

Medium
Fix: upgrade to 2.1.0 or later
GitHub advisory

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

Affected versions

PackageAffectedFixed in
org.apache.ambari:ambari
Maven
>= 1.5.0, < 2.1.02.1.0
Details and references
Severity from
GitHub (reviewed advisory)
Weakness
CWE-918
Also known as
CVE-2015-1775

More ambari advisories

All ambari
High 8.8Jul 12, 2023Apache Ambari Expression Language Injection vulnerabilityCVE-2022-45855fixed in 2.7.7High 8.8Jul 12, 2023Apache Ambari Expression Language Injection vulnerabilityCVE-2022-42009fixed in 2.7.7MediumMay 17, 2022Apache Ambari Open RedirectCVE-2015-5210fixed in 2.1.2Medium 5.5May 17, 2022Apache Ambari reveals administrator passwordsCVE-2016-4976fixed in 2.4.0Critical 9.8May 17, 2022Apache Ambari Improper Access ControlCVE-2016-6807fixed in 2.4.2Medium 6.1Jan 6, 2022Cross-site Scripting (XSS) in Apache Ambari ViewsCVE-2020-1936fixed in 2.7.4