GitHub Advisoryadvisory · Maven

GHSA-9g2j-5685-h44h Apache Ambari SSRF Vulnerability

MEDIUM Published 2022-05-17 Modified 2023-08-04 Official page ↗
Aliases
CVE-2015-1775
Ecosystem
Maven
Packages
org.apache.ambari:ambari
Severity
Moderate
Weaknesses
CWE-918
Reviewed
2023-08-04

Affected packages

• Maven org.apache.ambari:ambari: >= 1.5.0, < 2.1.0 → fixed in 2.1.0

Description

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (`api/v1/proxy`) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

Related

Alias · CVE (1)

  • CVE-2015-1775 Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References