CVEvulnerability

CVE-2014-3582

9.8 CRITICAL Published 2017-03-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-03-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Affected configurations

• apache ambari (<= 2.2.2)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References