Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/ranger

              master @ 9c88792
            

Fixes

CVEs

CRITICAL

Peak severity

40.0%

Coverage

Highlights

Auth Bypass: 17 prior fixes. Scrutinize any change in this area.

security-admin: most-fixed (3 issues). Treat as high-risk during review.

18 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A critical legacy or debug override allowed users to authenticate as the privileged 'keyadmin' role by simply providing a specific request parameter and matching an API path. This directly bypassed standard Kerberos authentication mechanisms.

Remote Code Execution: The policy condition evaluator permitted arbitrary code execution via the script engine when evaluating policies. Hardening was required to explicitly disable host class lookup, host class loading, thread creation, and native access in the GraalJS engine configuration.

Remote Code Execution: Unsafe dynamic driver class loading via Class.forName in JDBC connections allowed arbitrary class instantiation and code execution, necessitating the introduction of a strict JdbcUrlValidator to block dangerous connection properties.