CVE-2017-7676

Critical

Published: 14/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character, which can result in unintended behavior.

Risk Assessment

Ignoring characters after the '*' wildcard can lead to unauthorized access to resources, posing a security risk to the organization.

Recommendation

It is recommended to upgrade Apache Ranger to version 0.7.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.