What’s Vulnerable › Vulnerabilities

CVE-2017-7677

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-14 · updated 2026-06-17
• Weakness: CWE-862

Description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

Affected products

• Apache Software Foundation Apache Ranger: through 0.7.0

References

• http://www.securityfocus.com/bid/98961
• https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
• http://www.securityfocus.com/bid/98961
• https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

Get alerted when CVE-2017-7677 or the next vulnerability affects your stack