Home > Vulnerability Database > CVE-2017-7677

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

CVE-2017-7677

Good to know:

Date: June 14, 2017

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

Language: Java

Severity Score

5.9

Related Resources (4)

Url: https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

Url: https://nvd.nist.gov/vuln/detail/CVE-2017-7677

Url: http://www.securityfocus.com/bid/98961

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2017-7677

Severity Score

5.9

Weakness Type (CWE)

Permission Issues

CWE-275

Top Fix

Upgrade Version

No fix version available

CVSS v3

Base Score:	5.9
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privilegs Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	HIGH
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us