CVE-2015-5210: Medium severity apache ambari vulnerability
Published Nov 2, 2015
·Updated
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
Affected Software
7 affected componentsFixes available
maven/org.apache.ambari:ambari>=1.7.0<2.1.2
2.1.2
Apache Ambari<=2.1.1
Apache Ambari=1.7.0
Apache Ambari=2.0.0
Apache Ambari=2.0.1
Apache Ambari=2.0.2
Apache Ambari=2.1.0
Event History
Nov 2, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 17, 2022
Advisory Published
04:03 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-5210?
CVE-2015-5210 is classified as a medium severity vulnerability due to its potential for exploitation through phishing attacks.
2
How do I fix CVE-2015-5210?
To fix CVE-2015-5210, upgrade Apache Ambari to version 2.1.2 or later.
3
What impact does CVE-2015-5210 have on users?
CVE-2015-5210 allows remote attackers to redirect users to malicious websites, posing significant phishing risks.
4
Which versions of Apache Ambari are affected by CVE-2015-5210?
Apache Ambari versions before 2.1.2, as well as versions 1.7.0, 2.0.0, 2.0.1, 2.0.2, and 2.1.0 are affected by CVE-2015-5210.
5
What is the nature of the vulnerability in CVE-2015-5210?
CVE-2015-5210 is an open redirect vulnerability that enables attackers to redirect users to arbitrary external sites.