Moderate severity vulnerability that affects org.apache.ranger:ranger

MEDIO 5.9CVE-2017-7677 · GHSA-ffjh-fjgg-mfpq · Published 14/06/2017 · updated 17/06/2026

In breve

CVE-2017-7677 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda org.apache.ranger:ranger, ranger (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.4% delle vulnerabilità.
Correzione: aggiornare a 0.7.1 o successiva.

Package	Affected versions	Patched versions
org.apache.ranger:ranger Maven	`< 0.7.1`	`0.7.1`
ranger apache	`≤ 0.7.0`	No fix yet

Description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

NVD description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

References

nvd.nist.gov/vuln/detail/CVE-2017-7677 · ADVISORY
cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger · WEB
GitHub Advisory GHSA-ffjh-fjgg-mfpq · ADVISORY
securityfocus.com/bid/98961 · WEB

Altre vulnerabilità di org.apache.ranger:ranger

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.ranger:ranger

Maven

< 0.7.1

0.7.1

ranger

apache

≤ 0.7.0

No fix yet

Description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

NVD description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

Altre vulnerabilità di org.apache.ranger:ranger

Vedi tutto →