Test ID:	1.3.6.1.4.1.25623.1.0.809085
Category:	Privilege escalation
Title:	Apache Ambari 1.7.0 - 2.1.0 Privilege Escalation Vulnerability
Summary:	Apache Ambari is prone to a privilege escalation vulnerability.
Description:	Summary: Apache Ambari is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to an access to the user resource endpoint is not protected such that an authenticated user can remotely escalate his/her permissions to administrative level. Vulnerability Impact: Successfully exploitation will allow remote authenticated users to gain administrative privileges, possibly related to changing passwords. Affected Software/OS: Apache Ambari versions 1.7.0, 2.0.0, 2.0.1 and 2.1.0. Solution: Update to version 2.0.2, 2.1.1 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3270 http://www.openwall.com/lists/oss-security/2015/10/13/3
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.