Description
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
Remediation
References
http://www.securityfocus.com/bid/98961
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
Related Vulnerabilities
CVE-2021-3644 Vulnerability in maven package org.wildfly.core:wildfly-controller
CVE-2020-8244 Vulnerability in maven package org.webjars.npm:bl
CVE-2015-2582 Vulnerability in maven package org.keycloak:keycloak-saml-core
CVE-2022-29161 Vulnerability in maven package org.xwiki.platform:xwiki-platform-crypto
CVE-2022-24785 Vulnerability in maven package org.webjars.npm:moment