CVE-2018-8042

2018-07-1800:00:00

apache

www.cve.org

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

CNA Affected

[
  {
    "product": "Apache Ambari",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.5.0 to 2.6.2"
      }
    ]
  }
]