GHSA-758m-6g3q-g3hh

Source

https://github.com/advisories/GHSA-758m-6g3q-g3hh

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-758m-6g3q-g3hh/GHSA-758m-6g3q-g3hh.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-758m-6g3q-g3hh

Aliases

CVE-2017-7676

Published

2018-10-17T17:22:38Z

Modified

2023-11-01T04:48:20.494762Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character

Details

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like mytest, test*.txt. This can result in unintended behavior.

Database specific

{
    "github_reviewed": true,
    "severity": "CRITICAL",
    "nvd_published_at": null,
    "github_reviewed_at": "2020-06-16T21:21:27Z",
    "cwe_ids": [
        "CWE-20"
    ]
}

References

Affected packages

Maven / org.apache.ranger:ranger

Package

Name: org.apache.ranger:ranger; View open source insights on deps.dev
Purl: pkg:maven/org.apache.ranger/ranger

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.1

Affected versions

0.*

0.6.0

0.6.1

0.6.2

0.6.3

0.7.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-758m-6g3q-g3hh/GHSA-758m-6g3q-g3hh.json"