[AMBARI-26122] Security tool reports vulnerability CVE-2016-2183.

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8
• Fix Version/s: 3.0.0
• Component/s: ambari-server

Environment

Ambari 2.7.5

CentOS 7.6

OpenSSL 1.0.2

• Assignee: Unassigned
• Reporter: zhenye zhang
• Created: 04/Sep/24 07:18
• Updated: 12/Sep/24 00:38
• Resolved: 12/Sep/24 00:38

Description

Security tool reports the SSL/TLS protocol on port 8441 is easily be attacked. Please view the attachment.

 

For the detail info of  the vulnerability CVE-2016-2183, you can view https://nvd.nist.gov/vuln/detail/CVE-2016-2183 

Issue Links

• links to: GitHub PR#3820