Apache Ranger is vulnerable to a security bypass vulnerability. This is because the ranger policy engine incorrectly matches paths in certain conditions when a policy does not contain wildcards and has recursion flag set to true.
CPE | Name | Operator | Version |
---|---|---|---|
common library for plugins | le | 0.6.2 |