CVE-2017-5642

Description

During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.

Affected products

• Apache Software Foundation / Apache Ambari2.4.0 through 2.4.2 – 2.4.0 through 2.4.2

References

• MISChttps://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.0