Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character

심각 9.8CVE-2017-7676 · GHSA-758m-6g3q-g3hh · Published 14/06/2017 · updated 17/06/2026

요약

CVE-2017-7676은(는) org.apache.ranger:ranger, ranger (apache)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 4.2%, 전체 취약점의 91.0%보다 높음.
조치: 0.7.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.apache.ranger:ranger Maven	`< 0.7.1`	`0.7.1`
ranger apache	`≤ 0.7.0`	No fix yet

Description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test*.txt. This can result in unintended behavior.

NVD description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.

References

nvd.nist.gov/vuln/detail/CVE-2017-7676 · ADVISORY
cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger · WEB
GitHub Advisory GHSA-758m-6g3q-g3hh · ADVISORY
securityfocus.com/bid/98958 · WEB

org.apache.ranger:ranger의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.ranger:ranger

Maven

< 0.7.1

0.7.1

ranger

apache

≤ 0.7.0

No fix yet

Description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test*.txt. This can result in unintended behavior.

NVD description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.

org.apache.ranger:ranger의 다른 취약점

모두 보기 →