VULNERABILITY INTELLIGENCE

CVE-2014-3582

CVSS score9.8 CRITICAL
EPSS probability1.59%
CISA KEVNot currently listed
Published2017-03-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references