CVE-2015-5210
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-5210
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Ambari‘targetURI’参数开放重定向漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Ambari是美国阿帕奇（Apache）软件基金会的一套配置、管理和监控Apache Hadoop集群的工具。该工具支持作业与任务执行的可视化和分析、支持系统报警等。 Apache Ambari 2.1.2之前版本中存在开放重定向漏洞。远程攻击者可借助‘targetURI’参数中的URL利用该漏洞将用户重定向到任意Web站点，实施钓鱼攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-5210
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5210
请登录查看更多情报信息。
- https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilitiesx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-5210
Same Patch Batch · n/a · 2015-11-02 · 14 CVEs total
| CVE-2015-1775 | Apache Ambari 跨站请求伪造漏洞 | |
| CVE-2015-3186 | Apache Ambari 跨站脚本漏洞 | |
| CVE-2015-3270 | Apache Ambari 权限许可和访问控制漏洞 | |
| CVE-2015-5291 | ARM PolarSSL和ARM mbed TLS 基于堆的缓冲区溢出漏洞 | |
| CVE-2015-5308 | WordPress wp-championship插件SQL注入漏洞 | |
| CVE-2015-5470 | PowerDNS Recursor和Authoritative Server 资源管理错误漏洞 | |
| CVE-2015-5534 | Oxwall 跨站请求伪造漏洞 | |
| CVE-2015-6031 | MiniUPnP Client 缓冲区溢出漏洞 | |
| CVE-2015-8036 | ARM mbed TLS 基于堆的缓冲区溢出漏洞 | |
| CVE-2015-8037 | Fortinet FortiManager 跨站脚本漏洞 | |
| CVE-2015-8038 | Fortinet FortiManager 跨站脚本漏洞 | |
| CVE-2015-8039 | Samsung SmartViewer STWAxConfig控件和STWAxConfigNVR控件任意代码执行漏洞 | |
| CVE-2015-8040 | Samsung SmartViewer 代码注入漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2015-5210
No comments yet