CVE-2016-2174 Vulnerability in maven package org.apache.ranger:ranger

Description

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.

Remediation

References

https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

http://www.openwall.com/lists/oss-security/2016/06/01/3

Related Vulnerabilities

CVE-2019-15658 Vulnerability in npm package connect-pg-simple

CVE-2023-49371 Vulnerability in maven package com.ruoyi:ruoyi

CVE-2022-47105 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core

CVE-2023-3163 Vulnerability in maven package com.ruoyi:ruoyi-common

CVE-2018-3783 Vulnerability in npm package flintcms

Severity

High

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H