Beveiligingsadvies

CVE-2016-8751

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-06-14 17:00:00
Laatst bijgewerkt 2024-08-06 02:35:00
Toegewezen door apache
CVSS-score geen score
Status PUBLISHED

Beschrijving

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.