CVE-2020-13924

  • Last update: Apr 13, 2023

Description

In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.

Software From Fixed in
apache / ambari - 2.6.2.2.x

Details

    • Severity: High
  • CVE: CVE-2020-13924
  • Published: Mar 17, 2021
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs

OWASP TOP 10