Description
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.
Remediation
References
http://www.securityfocus.com/bid/98958
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
Related Vulnerabilities
CVE-2023-26102 Vulnerability in npm package rangy
CVE-2017-12610 Vulnerability in maven package org.apache.kafka:kafka_2.12
CVE-2021-4133 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2017-7688 Vulnerability in maven package org.apache.openmeetings:openmeetings-core
CVE-2023-37964 Vulnerability in maven package org.jenkins-ci.plugins:elasticbox