What’s Vulnerable › Vulnerabilities

CVE-2017-5642

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-03 · updated 2026-06-17
• Weakness: CWE-276

Description

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

Affected products

• Apache Software Foundation Apache Ambari: 2.4.0, 2.4.1, 2.4.2

References

• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0
• https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0

Get alerted when CVE-2017-5642 or the next vulnerability affects your stack