CVE-2015-1775

2015-11-0219:00:00

redhat

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

JSON

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

References

www.openwall.com/lists/oss-security/2015/10/13/2

cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities