SQL injection vulnerability in the policy admin tool in Apache Ranger

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-2174 · ADVISORY
• cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger · WEB
• GitHub Advisory GHSA-4rjf-mxfm-98h5 · ADVISORY
• openwall.com/lists/oss-security/2016/06/01/3 · WEB

org.apache.ranger:ranger のその他の脆弱性

• CVE-2026-28672緊急 9.8Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apac…
• CVE-2024-45479緊急 9.1SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apac…
• CVE-2024-45478中 4.8Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to versio…
• CVE-2022-45048高 8.8Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This i…
• CVE-2019-12397中 6.1Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version…