CVE-2017-3154
HighSummary
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
Risk Assessment
The exposure of excessive information may allow attackers to better understand the application's structure and potential weaknesses, increasing the risk of attacks.
Recommendation
It is recommended to upgrade to a newer version of Apache Atlas that does not expose such information in error responses.
Other vulnerabilities in Apache Atlas
See all- CVE-2026-40563High
Apache Atlas has a code injection vulnerability that allows an attacker to alter Gremlin traversal logic by supplying malicious query strings. This can lead to unauthorized access to data.
- CVE-2016-8752High
Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1 allow access to the webapp directory contents by pointing to URIs like /js and /img.
- CVE-2026-50622High
In Apache Atlas, missing authorization in admin endpoints allows any authenticated user, regardless of role, to perform administrative operations.
- CVE-2025-62198Medium
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier.
Original NVD description (English source)
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.