Apache Ambari CVE-2017-5655 Insecure Temporary File Handling Vulnerability

Bugtraq ID:	98466
Class:	Design Error
CVE:	CVE-2017-5655
Remote:	No
Local:	Yes
Published:	May 15 2017 12:00AM
Updated:	May 15 2017 12:00AM
Credit:	Pradeep Bhadani
Vulnerable:	Apache Ambari 2.5 Apache Ambari 2.4.2 Apache Ambari 2.4.1 Apache Ambari 2.4.0 Apache Ambari 2.2.2
Not Vulnerable:	Apache Ambari 2.5.1 Apache Ambari 2.4.3

Apache Ambari CVE-2017-5655 Insecure Temporary File Handling Vulnerability

Apache Ambari is prone to an insecure temporary file-handling vulnerability.

An attacker with local access could potentially exploit this issue to obtain sensitive data.

Ambari 2.2.2 through 2.4.2 and Ambari 2.5. are vulnerable.

Apache Ambari CVE-2017-5655 Insecure Temporary File Handling Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Ambari CVE-2017-5655 Insecure Temporary File Handling Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Ambari CVE-2017-5655 Insecure Temporary File Handling Vulnerability

References:

• Apache Ambari Homepage (Apache)
  
• Fixed in Ambari 2.4.3 (Apache)
  
• Fixed in Ambari 2.5.1 (Apache)