CVE-2017-7677

Description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.321

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-7677,CVE-2017-7676 are fixed in Apache - ranger 0.7.1	Windows
Vulnerabilities CVE-2017-7677,CVE-2017-7676 are fixed in Apache - ranger for Linux 0.7.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234