Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2015-11-08T22:00:00

Updated: 2024-08-06T06:32:31.549Z

Reserved: 2015-06-24T00:00:00

Link: CVE-2015-4928

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-11-08T22:59:10.373

Modified: 2024-11-21T02:32:02.263

Link: CVE-2015-4928

cve-icon Redhat

No data.