Lucene search
HistoryNov 02, 2015 - 7:59 p.m.
CVE-2015-3270
cve-2015-3270
apache ambari
remote authentication
administrative privileges
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.3%
Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administrative privileges via unspecified vectors, possibly related to changing passwords.
Affected configurations
Node
apacheambariMatch1.7.0
ORapacheambariMatch2.0.0
ORapacheambariMatch2.0.1
ORapacheambariMatch2.1.0
Related
nvd
nvd
CVE-2015-3270
2015-11-02 19:59:02
cvelist
cvelist
CVE-2015-3270
2015-11-02 19:00:00
openvas
openvas
Apache Ambari 1.7.0 - 2.1.0 Privilege Escalation Vulnerability
2016-11-04 00:00:00
prion
prion
Design/Logic Flaw
2015-11-02 19:59:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.3%
Related for CVE-2015-3270