Lucene search
Veracode Vulnerability DatabaseVERACODE:4405HistoryJun 08, 2017 - 6:50 a.m.
Permission Checking Bypass
2017-06-0806:50:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
29.7%
ranger is vulnerable to permission checking bypass. The vulnerability exists because RangerHiveAuthorizer.java fails to check for RWX permissions when an external location is used to create hive tables.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ranger | le | 0.7.0 | |
| hive security plugin | le | 0.7.0 |
References
seclists.org/oss-sec/2017/q2/432
www.securityfocus.com/bid/98961
cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
github.com/apache/ranger/compare/dffbad4af43018438faf00b156acf593ab47839c...2e193e124399cf685c17798b8243e1d62f223315
issues.apache.org/jira/browse/RANGER-1619
issues.apache.org/jira/browse/RANGER-1631
Related
cve
cve
CVE-2017-7677
2017-06-14 17:29:00
osv
osv
CVE-2017-7677
2017-06-14 17:29:00
Moderate severity vulnerability that affects org.apache.ranger:ranger
2018-10-17 17:22:49
prion
prion
Xxe
2017-06-14 17:29:00
cvelist
cvelist
CVE-2017-7677
2017-06-14 17:00:00
github
github
Moderate severity vulnerability that affects org.apache.ranger:ranger
2018-10-17 17:22:49
nvd
nvd
CVE-2017-7677
2017-06-14 17:29:00
zdt
zdt