Description
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.
Remediation
References
http://www.securityfocus.com/bid/98958
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
Related Vulnerabilities
CVE-2023-30465 Vulnerability in maven package org.apache.inlong:manager-service
CVE-2021-29943 Vulnerability in maven package org.apache.solr:solr-core
CVE-2021-44906 Vulnerability in npm package minimist
CVE-2017-5858 Vulnerability in npm package converse.js
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-elasticsearch-8