Test ID:	1.3.6.1.4.1.25623.1.0.106712
Category:	Web application abuses
Title:	Apache Ambari 2.4.0 - 2.4.1 Command Execution Vulnerability
Summary:	Apache Ambrari is prone to an unauthenticated custom command; execution vulnerability.
Description:	Summary: Apache Ambrari is prone to an unauthenticated custom command execution vulnerability. Vulnerability Insight: Custom commands may be executed on the Ambari Agent hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process. Affected Software/OS: Apache Ambari version 2.4.0 through 2.4.1. Solution: Update to version 2.4.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6807 BugTraq ID: 97184 http://www.securityfocus.com/bid/97184
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.