CVE-2018-8042

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store…

published July 18, 2018

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services. For example, Hive and Oozie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01754 · 77.6th percentile
Published
2018-07-18T15:00Z
EPSS history
Timeline
  • 18 JUL 15:00Z
    Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store…
    cvelistv5