cve/2016/CVE-2016-2174.md
2024-05-26 14:27:05 +02:00

675 B

CVE-2016-2174

Description

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime.

POC

Reference

No PoCs from references.

Github