CVE-2017-7676

Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 0.7.1

Description The policy resource matcher in Apache Ranger ignores characters after the '*' wildcard character, which can result in unintended behavior. This issue can be exploited by a remote attacker to cause undefined behavior in the program.

Recommendations For Apache Ranger versions prior to 0.7.1, update to version 0.7.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the '*' wildcard character in policy resource matchers to minimize the risk of exploitation.