Vulnerability Description
A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execute arbitrary code. The vulnerability occurs when processing alert definitions, where malicious input can be injected into the alert script execution path. An attacker with authenticated access can exploit this vulnerability to execute arbitrary commands on the server. The issue has been fixed in the latest versions of Ambari.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Ambari | <= 2.7.8 |
Related Weaknesses (CWE)
References
- https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8jVendor Advisory
- http://www.openwall.com/lists/oss-security/2025/01/21/9Mailing ListVendor Advisory
FAQ
What is CVE-2024-51941?
CVE-2024-51941 is a vulnerability with a CVSS score of 8.8 (HIGH). A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execute arbitrary code. The vulnerability occurs when processing...
How severe is CVE-2024-51941?
CVE-2024-51941 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-51941?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Ambari.