You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@ranger.apache.org by Velmurugan Periasamy <ve...@apache.org> on 2026/03/02 20:19:09 UTC

CVE-2025-59060: Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient

Severity: low 

Affected versions:

- Apache Ranger through 2.7.0

Description:

Hostname verification bypass issue in Apache Ranger NiFiRegistryClient/NiFiClient is reported in Apache Ranger versions <= 2.7.0.

Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Credit:

Nikita Markevich <ma...@gmail.com> (finder)

References:

https://ranger.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-59060