CVE-2016-4976

2017-03-2920:59:00

Google

osv.dev

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.

CPENameOperatorVersion
ambarieqrelease-2.2.1-rc0
ambarieqrelease-2.1.2-rc1
ambarieqrelease-2.0.0-rc3
ambarieqrelease-2.1.1-rc0
ambarieqrelease-2.1.2-rc0
ambarieqrelease-2.2.2
ambarieq2.1.3_to_2.2.0_rename
ambarieqrelease-2.2.2-rc1
ambarieqrelease-2.1.0-rc1
ambarieqrelease-2.2.1

Name	Operator	Version
ambari	eq	release-2.2.1-rc0
ambari	eq	release-2.1.2-rc1
ambari	eq	release-2.0.0-rc3
ambari	eq	release-2.1.1-rc0
ambari	eq	release-2.1.2-rc0
ambari	eq	release-2.2.2
ambari	eq	2.1.3_to_2.2.0_rename
ambari	eq	release-2.2.2-rc1
ambari	eq	release-2.1.0-rc1
ambari	eq	release-2.2.1