Lucene search
Veracode Vulnerability DatabaseVERACODE:3642HistoryMar 09, 2017 - 3:21 a.m.
Security Bypass
2017-03-0903:21:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
40.8%
Apache Ranger is vulnerable to a security bypass vulnerability. This is because the ranger policy engine incorrectly matches paths in certain conditions when a policy does not contain wildcards and has recursion flag set to true.
| CPE | Name | Operator | Version |
|---|---|---|---|
| common library for plugins | le | 0.6.2 |
Related
osv
osv
CVE-2016-8746
2017-06-14 17:29:00
Apache Ranger policy engine incorrectly matches paths in certain conditions
2018-10-17 17:22:05
cvelist
cvelist
CVE-2016-8746
2017-06-14 17:00:00
nvd
nvd
CVE-2016-8746
2017-06-14 17:29:00
prion
prion
Design/Logic Flaw
2017-06-14 17:29:00
cve
cve
CVE-2016-8746
2017-06-14 17:29:00
github
github
Apache Ranger policy engine incorrectly matches paths in certain conditions
2018-10-17 17:22:05