Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-50379
HistoryFeb 27, 2024 - 9:15 a.m.

CVE-2023-50379

2024-02-2709:15:36
CWE-94
[email protected]
web.nvd.nist.gov
cve-2023-50379
malicious code injection
apache ambari
cluster operator
root access

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fixes this issue.

Impact:
A Cluster Operator can manipulate the request by adding a malicious code injection and gain a root over the cluster main host.

Related

prion 1
osv 1
github 1
cvelist 1
cve 1
prion
prion
Code injection
2024-02-27 09:15:00
osv
osv
Apache Ambari: authenticated users could perform command injection to perform RCE
2024-02-27 09:31:16
github
github
Apache Ambari: authenticated users could perform command injection to perform RCE
2024-02-27 09:31:16
cvelist
cvelist
CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE
2024-02-27 08:27:03
cve
cve
CVE-2023-50379
2024-02-27 09:15:36

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON
Related for NVD:CVE-2023-50379
prion1osv1github1cvelist1cve1