CVE-2017-15712 | BDVDB-2026-96892 Detail

ApacheApache Oozie

Description#

Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/103102
https://lists.apache.org/thread.html/4606709264fe7cb0285e2a12aca2d01a06b14cd58791c9fc32abd216%40%3Cdev.oozie.apache.org%3E

Exploit#

No public exploit known

History#

Version 12018-02-19Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.