CVE-2025-59060: Apache Ranger: Hostname verification bypass in NiFiRegistryClient
Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Ranger (NiFiRegistryClient / NiFiClient)to a version that resolves this vulnerability.Fixed in 2.8.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59060?
CVE-2025-59060 has a medium severity rating due to the potential for hostname verification bypass.
How do I fix CVE-2025-59060?
To fix CVE-2025-59060, users should upgrade to Apache Ranger version 2.8.0 or later.
What versions of Apache Ranger are affected by CVE-2025-59060?
Apache Ranger versions up to and including 2.7.0 are affected by CVE-2025-59060.
What is the impact of CVE-2025-59060?
The impact of CVE-2025-59060 is that it allows a bypass of hostname verification, which can lead to security vulnerabilities.
Is there a workaround for CVE-2025-59060?
There is no official workaround for CVE-2025-59060; upgrading to the fixed version is the recommended course of action.