Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ambari | Apache | * | 2.1.1 (including) |
| Ambari | Apache | 1.7.0 (including) | 1.7.0 (including) |
| Ambari | Apache | 2.0.0 (including) | 2.0.0 (including) |
| Ambari | Apache | 2.0.1 (including) | 2.0.1 (including) |
| Ambari | Apache | 2.0.2 (including) | 2.0.2 (including) |
| Ambari | Apache | 2.1.0 (including) | 2.1.0 (including) |