Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-2174

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4rjf-mxfm-98h5

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.

gitlab/maven/org.apache.ranger/ranger/CVE-2016-2174

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.