CVE-2016-0731: Medium severity apache ambari vulnerability
Published May 18, 2016
·Updated
The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration.
Affected Software
1 affected component
Apache Ambari<=2.2.0
Event History
May 18, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0731?
CVE-2016-0731 is rated as medium severity due to the potential for unauthorized file access by authenticated users.
2
How do I fix CVE-2016-0731?
To fix CVE-2016-0731, upgrade Apache Ambari to version 2.2.1 or later.
3
Who is affected by CVE-2016-0731?
CVE-2016-0731 affects users of Apache Ambari versions prior to 2.2.1 that allow file browsing.
4
What type of attack does CVE-2016-0731 enable?
CVE-2016-0731 enables remote authenticated administrators to read arbitrary files by exploiting improper URL handling.
5
Is there a workaround for CVE-2016-0731?
There is no documented workaround for CVE-2016-0731; upgrading is the recommended action.