CVE-2017-5642

CRITICAL

Apache Ambari 2.4.0-2.4.2 - Incorrect Default Permissions

Title source: llm

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 9.8

EPSS 0.0077

EPSS Percentile 73.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-276

Status published

Products (4)

apache/ambari 2.4.0

apache/ambari 2.4.1

apache/ambari 2.4.2

Apache Software Foundation/Apache Ambari 2.4.0 through 2.4.2

Published Apr 03, 2017

Tracked Since Feb 18, 2026