CVE-2017-7676

Description

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.

Affected products

• Apache Software Foundation / Apache Ranger0.5.x – 0.5.x
• Apache Software Foundation / Apache Ranger0.6.x – 0.6.x
• Apache Software Foundation / Apache Ranger0.7.0 – 0.7.0

References

• MISChttps://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
• MISChttp://www.securityfocus.com/bid/98958