CVE-2018-8042

Description

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

References

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-CVE-2018-8042

http://www.securityfocus.com/bid/104869

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS