Description
该缺陷源自 Apache Ambari 中的Server Agent，使一系列 Hadoop 管理操作面临风险。 攻击者可以利用此漏洞，损害 Hadoop 集群的完整性，并可能获得对敏感数据的未经授权的访问。
Apache Ambari Server Agent 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-51941
https://securityonline.info/cve-2022-42009-cve-2022-45855-rce-bugs-in-apache-ambari/
https://cve.imfht.com/detail/CVE-2022-42009
https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8j
https://nvd.nist.gov/vuln/detail/CVE-2025-23196
https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities
https://github.com/advisories/GHSA-m384-pj54-5vr2
https://stack.watch/vuln/CVE-2022-42009/