CVE-2015-1775

Apache Ambari < 2.1.0 - Authenticated Server-Side Request Forgery via Proxy Endpoint

Title source: llm
STIX 2.1

Description

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/10/13/2

Scores

EPSS 0.0024
EPSS Percentile 47.8%

Details

Status published
Products (9)
apache/ambari 1.5.0
apache/ambari 1.5.1
apache/ambari 1.6.0
apache/ambari 1.6.1
apache/ambari 1.7.0
apache/ambari 2.0.0
apache/ambari 2.0.1
apache/ambari 2.0.2
org.apache.ambari/ambari 1.5.0 - 2.1.0Maven
Published Nov 02, 2015
Tracked Since Feb 18, 2026