GHSA-ffjh-fjgg-mfpq

Moderate severity vulnerability that affects org.apache.ranger:ranger

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-7677

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.apache.ranger:ranger	< 0.7.1	0.7.1

Details

As written in the advisory (Markdown source, shown as plain text).

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2017-7677 advisory
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger web
https://github.com/advisories/GHSA-ffjh-fjgg-mfpq advisory
http://www.securityfocus.com/bid/98961 web