Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2015-0266 · ADVISORY
• cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger · WEB
• apache/ranger · PACKAGE
• mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E · WEB
• mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%[email protected]%3E · WEB
• web.archive.org/web/20200228073944/http://www.securityfocus.com/bid/76221 · WEB
• slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security · WEB
• securityfocus.com/bid/76221

Lỗ hổng khác của org.apache.ranger:ranger

• CVE-2026-28672NGHIÊM TRỌNG 9.8Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apac…
• CVE-2024-45479NGHIÊM TRỌNG 9.1SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apac…
• CVE-2024-45478TRUNG BÌNH 4.8Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to versio…
• CVE-2022-45048CAO 8.8Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This i…
• CVE-2019-12397TRUNG BÌNH 6.1Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version…