« Volver al listado

CVE-2017-3154

Estado: ModificadaAlta (7.5)—

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apache — Atlas

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-3154",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@apache.org",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Atlas",
          "versions": [
            {
              "status": "affected",
              "version": "0.6.0-incubating"
            },
            {
              "status": "affected",
              "version": "0.7.0-incubating"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-08-29T20:29:00.593",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/100581",
      "source": "security@apache.org"
    },
    {
      "url": "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
      "source": "security@apache.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/100581",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information."
    },
    {
      "lang": "es",
      "value": "Las respuestas de error de Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating incluyen seguimiento de la pila, lo que expone información excesiva."
    }
  ],
  "lastModified": "2026-06-17T01:17:37.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A29E849-5092-496D-9D46-ABEAEEDE9129"
            },
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.6.0:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3562FE93-F83F-46A0-B5CC-E366D3A85D0E"
            },
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.6.0:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6A04ED5-6C1D-47DC-A7DE-A402DA828C9F"
            },
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9064A625-AA0A-4606-9DB1-98D5015C648F"
            },
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.7.0:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CACA970-3D32-47E8-87AD-7C618EBA8096"
            },
            {
              "criteria": "cpe:2.3:a:apache:atlas:0.7.0:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B73379D5-9AB4-42A4-B242-D3E6DC553BBB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@apache.org"
}