Apache Hive authorization framework security bypass vulnerability

Apache Hive is a suite of Hadoop-based data warehouse software. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. authorization is one of the authorization framework. Apache Hive's authorization framework has a securi...

Authorization

The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations...

CVE-2015-7521

The CVE-2015-7521 entry concerns Apache Hive (versions 1.0.0–1.2.1) run on clusters protected by Ranger and SqlStdHiveAuthorization. It describes an authorization bypass where partition-level operations can grant access that should be denied at the parent table level, effectively bypassing parent...

CVE-2015-7521

The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations...

PT-2016-3802

Name of the Vulnerable Software and Affected Versions Apache Hive versions 1.0.0 through 1.2.1 Description The issue concerns the authorization framework, allowing attackers to bypass intended access restrictions on parent tables via partition-level operations, in clusters protected by Ranger and...

CVE-2015-7521: Improper Authentication

The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations...

Apache Ranger JavaScript Code Injection Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. A security...

Apache Ranger Access Bypass Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. An access bypass...

PT-2014-8693

Name of the Vulnerable Software and Affected Versions Subex ROC Fraud Management versions 7.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the ranger username parameter in the login page, specifically the "login/login" endpoint. Recommendations F...

Unfixed XSS vulnerability at www.rangerboats.com

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.rangerboats.com, which at the time of submission ranked 454199 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...