CVE-2018-11778

2018-10-0400:00:00

apache

www.cve.org

8.8 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

JSON

UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow. Versions prior to 1.2.0 should be upgraded to 1.2.0

CNA Affected

[
  {
    "product": "Apache Ranger",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 1.2.0"
      }
    ]
  }
]