CVE-2016-8746

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.

Date published : 2017-06-14

http://www.securityfocus.com/bid/95998

https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger