Description
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/10/13/4
Scores
EPSS
0.0096
EPSS Percentile
76.7%
Details
Status
published
Products (7)
apache/ambari
1.7.0
apache/ambari
2.0.0
apache/ambari
2.0.1
apache/ambari
2.0.2
apache/ambari
2.1.0
apache/ambari
< 2.1.1
org.apache.ambari/ambari
1.7.0 - 2.1.2Maven
Published
Nov 02, 2015
Tracked Since
Feb 18, 2026