CVE-2018-8042

2018-07-1815:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.0%

JSON

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

CPENameOperatorVersion
ambarieqrelease-2.5.1-rc0
ambarieqrelease-2.6.0-rc0
ambarieqrelease-2.6.1-rc0
ambarieqrelease-2.6.2
ambarieqrelease-2.5.0
ambarieqrelease-2.6.0
ambarieqrelease-2.5.1
ambarieqrelease-2.6.1-rc1
ambarieqrelease-2.6.1
ambarieqrelease-2.5.0-rc2

Name	Operator	Version
ambari	eq	release-2.5.1-rc0
ambari	eq	release-2.6.0-rc0
ambari	eq	release-2.6.1-rc0
ambari	eq	release-2.6.2
ambari	eq	release-2.5.0
ambari	eq	release-2.6.0
ambari	eq	release-2.5.1
ambari	eq	release-2.6.1-rc1
ambari	eq	release-2.6.1
ambari	eq	release-2.5.0-rc2