Description
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
Remediation
References
http://www.securityfocus.com/bid/98961
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
Related Vulnerabilities
CVE-2018-19797 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2022-25898 Vulnerability in maven package org.webjars.npm:jsrsasign
CVE-2022-45146 Vulnerability in maven package org.bouncycastle:bc-fips
CVE-2020-28453 Vulnerability in npm package npos-tesseract
CVE-2022-31367 Vulnerability in npm package strapi-plugin-content-type-builder