GitHub Advisoryadvisory · Maven

GHSA-758m-6g3q-g3hh Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character

CRITICAL Published 2018-10-17 Modified 2022-04-27 Official page ↗
Aliases
CVE-2017-7676
Ecosystem
Maven
Packages
org.apache.ranger:ranger
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2020-06-16

Affected packages

• Maven org.apache.ranger:ranger: < 0.7.1 → fixed in 0.7.1

Description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.

Related

Alias · CVE (1)

  • CVE-2017-7676 Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References