{"action":"Upgrade org.apache.ranger:ranger-hive-plugin to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"2.0.0"}],"component":"org.apache.ranger:ranger-hive-plugin","cve_ids":["CVE-2021-40331"],"ecosystem":"Maven","epss":0.00918,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-vjr2-wpfh-5r9p","id":"tcs_01M5N9E7N6D1SVZ2K513454KW3","modified_at":"2024-02-16T08:23:49.077373Z","published_at":"2023-05-05T09:30:15Z","references":["https://osv.dev/vulnerability/GHSA-vjr2-wpfh-5r9p","https://nvd.nist.gov/vuln/detail/CVE-2021-40331","https://github.com/apache/ranger/commit/7dec3015ec82b69ba8f724410f12dfce2480cccd","https://github.com/apache/ranger/commit/9115a20d524ba9173ce5db3e270c385d58d8aeab","https://github.com/apache/ranger","https://issues.apache.org/jira/browse/RANGER-3357","https://issues.apache.org/jira/browse/RANGER-3474","https://lists.apache.org/thread/s68yls6cnkdmzn1k4hqt50vs6wjvt2rn"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-vjr2-wpfh-5r9p","url":"https://osv.dev/vulnerability/GHSA-vjr2-wpfh-5r9p"}],"summary":"Apache Ranger Hive Plugin missing permissions check"}