Apache Ambari Remote Code Injection Vulnerability in Metrics and AMS Alerts

A remote code injection vulnerability has been identified in Apache Ambari versions through 2.7.8, specifically within the Ambari Metrics and AMS Alerts feature. This vulnerability allows authenticated users to inject and execute arbitrary code by exploiting the alert definitions process. Malicious input can be inserted into the execution path of alert scripts, enabling an attacker with authenticated access to execute commands on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server.

Remediation

The vulnerability has been fixed in the latest versions of Apache Ambari.