Apache Ambari Vulnerability (CVE-2016-0707)

Apache Ambari Vulnerability (CVE-2016-0707)
Apache Ambari Vulnerability (CVE-2016-0707)

Release date:
Updated on:

Affected Systems:

Apache Group Ambari <2.1.2

Description:

CVE (CAN) ID: CVE-2016-0707

Apache Ambari is a tool that defines, manages, and monitors Apache Hadoop clusters.

In Apache versions earlier than Ambari 2.1.2, the agent has weak permissions on/var/lib/ambari-agent/data and/var/lib/ambari-agent/keys directories. By reading files in a directory, local users can obtain sensitive information.

<* Source: Apache

*>

Suggestion:

Vendor patch:

Apache Group
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.1.2

Use Ambari to install Hadoop clusters in CentOS 6.5

Install Hadoop Cluster Monitoring Tool Ambari

Use Ambari to quickly deploy the Hadoop Big Data Environment

This article permanently updates the link address: