CVE-2016-2174 | BDVDB-2026-76375 Detail

Description#

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/06/01/3
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger

Exploit#

No public exploit known

History#

Version 12016-06-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.