Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2015-5210

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

PublishedNov 02, 2015, 19:59

Published Bysecalert@redhat.com

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.apache.ambari:ambari(Maven)1.7.02.1.2N/A

References

http://www.openwall.com/lists/oss-security/2015/10/13/4
https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

5.8

Vector String

AV:N/AC:M/Au:N/C:P/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)