Description
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
Remediation
References
http://www.securityfocus.com/bid/98961
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
Related Vulnerabilities
CVE-2015-3250 Vulnerability in maven package org.apache.directory.api:api-ldap-model
CVE-2023-34615 Vulnerability in maven package net.pwall.json:jsonutil
CVE-2023-33202 Vulnerability in maven package org.bouncycastle:bc-fips-debug
CVE-2018-16472 Vulnerability in maven package org.webjars.npm:cached-path-relative
CVE-2023-40814 Vulnerability in maven package org.opencrx:opencrx-core-models