CVE-2017-7677

Description

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.

Affected products

• Apache Software Foundation / Apache Ranger0.5.x – 0.5.x
• Apache Software Foundation / Apache Ranger0.6.x – 0.6.x
• Apache Software Foundation / Apache Ranger0.7.0 – 0.7.0

References

• MISChttp://www.securityfocus.com/bid/98961
• MISChttps://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger