Description

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.

Remediation

References

http://www.securityfocus.com/bid/95998

https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

Related Vulnerabilities

CVE-2017-16030 Vulnerability in npm package useragent

CVE-2014-3744 Vulnerability in npm package st

CVE-2020-36049 Vulnerability in npm package socket.io-parser

CVE-2020-7688 Vulnerability in npm package mversion

CVE-2019-16767 Vulnerability in npm package ezmaster

Severity

Medium

Classification

CWE-426 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory VDB Entry Release Notes Vendor Advisory