Description

The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.

Remediation

References

http://www.securityfocus.com/bid/82871

https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E

Related Vulnerabilities

CVE-2021-32012 Vulnerability in npm package xlsx

CVE-2021-22132 Vulnerability in maven package org.elasticsearch:elasticsearch

CVE-2023-29201 Vulnerability in maven package org.xwiki.commons:xwiki-commons-xml

CVE-2015-8131 Vulnerability in npm package kibana

CVE-2023-45818 Vulnerability in npm package tinymce

Severity

High

Classification

CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Vendor Advisory