CVE-2015-1775 | BDVDB-2026-72633 Detail

Description#

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities
http://www.openwall.com/lists/oss-security/2015/10/13/2

Exploit#

No public exploit known

History#

Version 12015-11-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.