imPC@ndo IT

Tracker / CVE-2015-5210

CVE-2015-5210

Medium 5.8

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

Affected products and versions

apache ambari
apache ambari · … → 2.1.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References