Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2018/10/17 5:22 p.m.•50 views

GHSA-758M-6G3Q-G3HH Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test.txt. This can result in unintended behavior...

9.8CVSS9.4AI score0.04198EPSS
SaveExploits1References4
Prion
Prion
•added 2017/06/14 5:29 p.m.•26 views

Design/Logic Flaw

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test.txt. This can result in unintended behavior...

7.5CVSS9.4AI score0.04198EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2017/06/14 5:00 p.m.•6 views

CVE-2017-7676

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test.txt. This can result in unintended behavior...

9.8CVSS0.04198EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2017/06/14 5:00 p.m.•44 views

CVE-2017-7676

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test.txt. This can result in unintended behavior...

9.5AI score0.04198EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/14 12:00 a.m.•10 views

CVE-2017-7676: Improper Input Validation

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test.txt. This can result in unintended behavior...

9.8CVSS8.2AI score0.04198EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/06/14 12:00 a.m.•7 views

PT-2017-2755

Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 0.7.1 Description The policy resource matcher in Apache Ranger ignores characters after the '' wildcard character, which can result in unintended behavior. This issue can be exploited by a remote attacker to cau...

9.8CVSS0.04198EPSS
SaveExploits1References7
Veracode
Veracode
•added 2017/06/08 6:11 a.m.•34 views

Unintended Behaviours

ranger-plugins-common is vulnerable to unintended behaviors. It is possible because the policy resource matcher does not properly handle the policies with characters after a wildcard character, leading to unintended behaviors...

9.8CVSS6.6AI score0.04198EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder