CVE-2017-7677: Medium severity apache ranger vulnerability
Published Jun 14, 2017
·Updated
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
Affected Software
1 affected component
Apache Ranger<=0.7.0
Event History
Jun 14, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7677?
CVE-2017-7677 is considered a medium severity vulnerability due to improper permission checks.
2
How do I fix CVE-2017-7677?
To fix CVE-2017-7677, upgrade Apache Ranger to version 0.7.1 or later.
3
What is the impact of CVE-2017-7677 on my systems?
CVE-2017-7677 can allow unauthorized users to create tables, potentially leading to data breaches or information leaks.
4
Which versions of Apache Ranger are affected by CVE-2017-7677?
Apache Ranger versions before 0.7.1 are affected by CVE-2017-7677.
5
What components are specifically vulnerable in CVE-2017-7677?
The Hive Authorizer component in Apache Ranger is specifically vulnerable in CVE-2017-7677.