Wildcard Character Mismanagement in Apache Ranger by Apache

CVE-2017-7676

What is CVE-2017-7676?

The policy resource matcher in Apache Ranger prior to version 0.7.1 contains a flaw whereby it fails to properly process input that includes characters following the '*' wildcard. This limitation allows for potential manipulations that lead to unintended behavior in resource matching, disrupting security policies that rely on accurate resource identification.

References