CVE-2014-3582

Critical

Published: 29/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Ambari versions 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.

Risk Assessment

This vulnerability could lead to the compromise of the Ambari server, posing a serious security threat to the entire cluster.

Recommendation

It is recommended to upgrade to the latest version of Ambari to mitigate this vulnerability and restrict access to the SSL certificate generation functionality.

Original NVD description (English source)

In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster.