What’s Vulnerable › Vulnerabilities

CVE-2017-3154

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-200

Description

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

Affected products

• Apache Software Foundation Apache Atlas: 0.6.0, 0.6.0-rc1, 0.6.0-rc2, 0.7.0, 0.7.0-rc1, 0.7.0-rc2

References

• http://www.securityfocus.com/bid/100581
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E
• http://www.securityfocus.com/bid/100581
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E

Get alerted when CVE-2017-3154 or the next vulnerability affects your stack